CVE-2021-31376: Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets
An Improper Input Validation vulnerability in Packet Forwarding Engine manager (FXPC) process of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by sending specific DHCPv6 packets to the device and crashing the FXPC service. Continued receipt and processing of this specific packet will create a sustained Denial of Service (DoS) condition. This issue affects only the following platforms in ACX Series: ACX500, ACX1000, ACX1100, ACX2100, ACX2200, ACX4000, ACX5048, ACX5096 devices. Other ACX platforms are not affected from this issue. This issue affects Juniper Networks Junos OS on ACX500, ACX1000, ACX1100, ACX2100, ACX2200, ACX4000, ACX5048, ACX5096: 18.4 version 18.4R3-S7 and later versions prior to 18.4R3-S8. This issue does not affect: Juniper Networks Junos OS 18.4 versions prior to 18.4R3-S7 on ACX500, ACX1000, ACX1100, ACX2100, ACX2200, ACX4000, ACX5048, ACX5096.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31376?
CVE-2021-31376 has a severity rating that qualifies it as a Denial of Service vulnerability.
How do I fix CVE-2021-31376?
To fix CVE-2021-31376, it is recommended to update your Junos OS to a version that addresses this vulnerability.
What devices are affected by CVE-2021-31376?
CVE-2021-31376 specifically affects Juniper Networks Junos OS version 18.4-r3-s7.
What type of attack is described in CVE-2021-31376?
CVE-2021-31376 describes an Improper Input Validation vulnerability that can be exploited to perform Denial of Service attacks.
What could happen if CVE-2021-31376 is exploited?
If CVE-2021-31376 is exploited, it can cause the FXPC service to crash and disrupt network operations.