CVE-2021-31361: Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated
An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on QFX Series and PTX Series allows an unauthenticated network based attacker to cause increased FPC CPU utilization by sending specific IP packets which are being VXLAN encapsulated leading to a partial Denial of Service (DoS). Continued receipted of these specific traffic will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on QFX Series: All versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S3, 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2. Juniper Networks Junos OS on PTX Series: All versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R1-S4, 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 17.3R3-S11 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 17.4R2-S13 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 17.4R3-S4 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.1R3-S12 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.2R2-S8 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.2R3-S7 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.3R3-S4 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.4R1-S8 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.4R2-S7 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 18.4R3-S7 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.1R1-S6 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.1R2-S2 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.1R3-S4 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.2R1-S6 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.2R3-S2 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.3R3-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.4R2-S3 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 19.4R3-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 20.1R2 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 20.1R3 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 20.2R2 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 20.2R3 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 20.3R1-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (QFX Series)to a version that resolves this vulnerability.Fixed in 20.3R2 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 18.4R3-S9 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.1R3-S6 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.2R1-S7 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.2R3-S3 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.3R2-S6 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.3R3-S3 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.4R1-S4 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 19.4R3-S5 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.1R2-S2 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.1R3 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.2R3-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.3R2-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.3R3 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.4R2-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 20.4R3 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 21.1R1-S1 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 21.1R2 - Upgrade
Upgrade
Juniper Networks Junos OS (PTX Series)to a version that resolves this vulnerability.Fixed in 21.2R1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31361?
The severity of CVE-2021-31361 is classified as high, as it allows unauthorized users to impact the CPU utilization of affected devices.
How do I fix CVE-2021-31361?
To fix CVE-2021-31361, it is recommended to apply the latest security patches provided by Juniper Networks for the affected Junos OS versions.
Which devices are affected by CVE-2021-31361?
CVE-2021-31361 affects several devices including those in the Juniper QFX Series and PTX Series running specific vulnerable versions of Junos OS.
Can unauthorized access be used to exploit CVE-2021-31361?
Yes, CVE-2021-31361 can be exploited by unauthenticated network-based attackers, which makes it a serious vulnerability.
What versions of Junos OS are impacted by CVE-2021-31361?
CVE-2021-31361 impacts Junos OS versions 17.3, 17.4, 18.1, 18.2, 18.3, 18.4, 19.1, 19.2, 19.3, 19.4, and several variations thereof.