CVE-2021-31374: Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Published Oct 19, 2021

Updated

On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and restart, causing a Denial of Service (DoS). Continued receipt and processing of this message will create a sustained Denial of Service (DoS) condition. This issue affects both IBGP and EBGP deployments over IPv4 or IPv6. This issue affects: Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S4, 19.4R1-S4, 19.4R2-S3, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2. Juniper Networks Junos OS Evolved: 20.3 versions prior to 20.3R2-EVO.

Affected Software

170 affected components

Juniper JUNOS=17.3

Juniper JUNOS=17.3-r1

Juniper JUNOS=17.3-r1-s1

Juniper JUNOS=17.3-r1-s4

Juniper JUNOS=17.3-r2

Juniper JUNOS=17.3-r2-s1

Juniper JUNOS=17.3-r2-s2

Juniper JUNOS=17.3-r2-s3

Juniper JUNOS=17.3-r2-s4

Juniper JUNOS=17.3-r2-s5

Juniper JUNOS=17.3-r3

Juniper JUNOS=17.3-r3-s1

Juniper JUNOS=17.3-r3-s10

Juniper JUNOS=17.3-r3-s2

Juniper JUNOS=17.3-r3-s3

Juniper JUNOS=17.3-r3-s4

Juniper JUNOS=17.3-r3-s5

Juniper JUNOS=17.3-r3-s6

Juniper JUNOS=17.3-r3-s7

Juniper JUNOS=17.3-r3-s8

Juniper JUNOS=17.3-r3-s9

Juniper JUNOS=17.4

Juniper JUNOS=17.4-r1

Juniper JUNOS=17.4-r1-s1

Juniper JUNOS=17.4-r1-s2

Juniper JUNOS=17.4-r1-s3

Juniper JUNOS=17.4-r1-s4

Juniper JUNOS=17.4-r1-s5

Juniper JUNOS=17.4-r1-s6

Juniper JUNOS=17.4-r1-s7

Juniper JUNOS=17.4-r2

Juniper JUNOS=17.4-r2-s1

Juniper JUNOS=17.4-r2-s10

Juniper JUNOS=17.4-r2-s11

Juniper JUNOS=17.4-r2-s12

Juniper JUNOS=17.4-r2-s2

Juniper JUNOS=17.4-r2-s3

Juniper JUNOS=17.4-r2-s4

Juniper JUNOS=17.4-r2-s5

Juniper JUNOS=17.4-r2-s6

Juniper JUNOS=17.4-r2-s7

Juniper JUNOS=17.4-r2-s8

Juniper JUNOS=17.4-r2-s9

Juniper JUNOS=17.4-r3

Juniper JUNOS=17.4-r3-s1

Juniper JUNOS=17.4-r3-s2

Juniper JUNOS=17.4-r3-s3

Juniper JUNOS=18.1

Juniper JUNOS=18.1-r1

Juniper JUNOS=18.1-r2

Juniper JUNOS=18.1-r2-s1

Juniper JUNOS=18.1-r2-s2

Juniper JUNOS=18.1-r2-s4

Juniper JUNOS=18.1-r3

Juniper JUNOS=18.1-r3-s1

Juniper JUNOS=18.1-r3-s10

Juniper JUNOS=18.1-r3-s11

Juniper JUNOS=18.1-r3-s2

Juniper JUNOS=18.1-r3-s3

Juniper JUNOS=18.1-r3-s4

Juniper JUNOS=18.1-r3-s5

Juniper JUNOS=18.1-r3-s6

Juniper JUNOS=18.1-r3-s7

Juniper JUNOS=18.1-r3-s8

Juniper JUNOS=18.1-r3-s9

Juniper JUNOS=18.2

Juniper JUNOS=18.2-r1

Juniper JUNOS=18.2-r1-s2

Juniper JUNOS=18.2-r1-s3

Juniper JUNOS=18.2-r1-s4

Juniper JUNOS=18.2-r1-s5

Juniper JUNOS=18.2-r2

Juniper JUNOS=18.2-r2-s1

Juniper JUNOS=18.2-r2-s2

Juniper JUNOS=18.2-r2-s3

Juniper JUNOS=18.2-r2-s4

Juniper JUNOS=18.2-r2-s5

Juniper JUNOS=18.2-r2-s6

Juniper JUNOS=18.2-r2-s7

Juniper JUNOS=18.2-r3

Juniper JUNOS=18.2-r3-s1

Juniper JUNOS=18.2-r3-s2

Juniper JUNOS=18.2-r3-s3

Juniper JUNOS=18.2-r3-s4

Juniper JUNOS=18.2-r3-s5

Juniper JUNOS=18.2-r3-s6

Juniper JUNOS=18.3

Juniper JUNOS=18.3-r1

Juniper JUNOS=18.3-r1-s1

Juniper JUNOS=18.3-r1-s2

Juniper JUNOS=18.3-r1-s3

Juniper JUNOS=18.3-r1-s4

Juniper JUNOS=18.3-r1-s5

Juniper JUNOS=18.3-r1-s6

Juniper JUNOS=18.3-r2

Juniper JUNOS=18.3-r2-s1

Juniper JUNOS=18.3-r2-s2

Juniper JUNOS=18.3-r2-s3

Juniper JUNOS=18.3-r2-s4

Juniper JUNOS=18.3-r3

Juniper JUNOS=18.3-r3-s1

Juniper JUNOS=18.3-r3-s2

Juniper JUNOS=18.3-r3-s3

Juniper JUNOS=18.4

Juniper JUNOS=18.4-r1

Juniper JUNOS=18.4-r1-s1

Juniper JUNOS=18.4-r1-s2

Juniper JUNOS=18.4-r1-s3

Juniper JUNOS=18.4-r1-s4

Juniper JUNOS=18.4-r1-s5

Juniper JUNOS=18.4-r1-s6

Juniper JUNOS=18.4-r1-s7

Juniper JUNOS=18.4-r2

Juniper JUNOS=18.4-r2-s1

Juniper JUNOS=18.4-r2-s2

Juniper JUNOS=18.4-r2-s3

Juniper JUNOS=18.4-r2-s4

Juniper JUNOS=18.4-r2-s5

Juniper JUNOS=18.4-r2-s6

Juniper JUNOS=19.1

Juniper JUNOS=19.1-r1

Juniper JUNOS=19.1-r1-s1

Juniper JUNOS=19.1-r1-s2

Juniper JUNOS=19.1-r1-s3

Juniper JUNOS=19.1-r1-s4

Juniper JUNOS=19.1-r1-s5

Juniper JUNOS=19.1-r2

Juniper JUNOS=19.1-r2-s1

Juniper JUNOS=19.1-r3

Juniper JUNOS=19.1-r3-s1

Juniper JUNOS=19.2

Juniper JUNOS=19.2-r1

Juniper JUNOS=19.2-r1-s1

Juniper JUNOS=19.2-r1-s2

Juniper JUNOS=19.2-r1-s3

Juniper JUNOS=19.2-r1-s4

Juniper JUNOS=19.2-r1-s5

Juniper JUNOS=19.2-r3

Juniper JUNOS=19.3

Juniper JUNOS=19.3-r1

Juniper JUNOS=19.3-r1-s1

Juniper JUNOS=19.3-r2

Juniper JUNOS=19.3-r2-s1

Juniper JUNOS=19.3-r2-s2

Juniper JUNOS=19.3-r2-s3

Juniper JUNOS=19.3-r2-s4

Juniper JUNOS=19.3-r3

Juniper JUNOS=19.4-r1

Juniper JUNOS=19.4-r1-s1

Juniper JUNOS=19.4-r1-s2

Juniper JUNOS=19.4-r1-s3

Juniper JUNOS=19.4-r2

Juniper JUNOS=19.4-r2-s1

Juniper JUNOS=19.4-r2-s2

Juniper JUNOS=19.4-r3

Juniper JUNOS=20.1-r1

Juniper JUNOS=20.1-r1-s1

Juniper JUNOS=20.1-r1-s2

Juniper JUNOS=20.1-r1-s3

Juniper JUNOS=20.1-r1-s4

Juniper JUNOS=20.2-r1

Juniper JUNOS=20.2-r1-s1

Juniper JUNOS=20.2-r1-s2

Juniper JUNOS=20.2-r1-s3

Juniper JUNOS=20.3-r1

Juniper Junos OS Evolved=20.3

Juniper Junos OS Evolved=20.3-r1

Juniper Junos OS Evolved=20.3-r1-s1

Juniper Junos OS Evolved=20.3-r1-s2

Juniper Junos OS Evolved=20.3-r1-s3

Remediation

Information

The following software releases have been updated to resolve this specific issue: Junos OS: 17.3R3-S11, 17.4R2-S13, 17.4R3-S4, 18.1R3-S12, 18.2R2-S8, 18.3R3-S4, 18.4R1-S8, 18.4R2-S7, 18.4R3-S7, 19.1R1-S6, 19.1R2-S2, 19.1R3-S4, 19.2R1-S6, 19.2R3-S1, 19.3R2-S5, 19.3R3-S1, 19.4R1-S4, 19.4R2-S3, 19.4R3-S1, 20.1R2, 20.1R3, 20.2R2, 20.2R3, 20.3R1-S1, 20.3R2, 20.4R1, and all subsequent releases. Junos OS Evolved: 20.3R2-EVO and all subsequent releases.

Event History

Oct 19, 2021

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-31374?

The severity of CVE-2021-31374 is rated as critical due to its potential to cause a Denial of Service (DoS) via crashing the routing process daemon.

How do I fix CVE-2021-31374?

To fix CVE-2021-31374, update your Junos OS to the patched versions listed in the official advisory.

What devices are affected by CVE-2021-31374?

CVE-2021-31374 affects Juniper Networks Junos OS and Junos OS Evolved devices running specified versions.

What exploitation method is used for CVE-2021-31374?

CVE-2021-31374 can be exploited through specially crafted BGP UPDATE or KEEPALIVE messages.

What are the consequences of not addressing CVE-2021-31374?

If CVE-2021-31374 is not addressed, it may lead to recurrent crashes of the routing process daemon, resulting in persistent network outages.