製品・ソフトウェアに関する情報

JVN脆弱性詳細

Juniper Networks Junos OS における入力確認に関する脆弱性

Title	Juniper Networks Junos OS における入力確認に関する脆弱性
Summary	Juniper Networks Junos OS には、入力確認に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 14, 2021, midnight
Registration Date	Dec. 17, 2021, 1:49 p.m.
Last Update	Dec. 17, 2021, 1:49 p.m.

Affected System

ジュニパーネットワークス

Junos OS

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2021-0267	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0267
National Vulnerability Database (NVD)
2	CVE-2021-0267	https://nvd.nist.gov/vuln/detail/CVE-2021-0267

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Juniper Networks
1	active-leasequery (DHCP Relay Agent)	https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/ref/statement/active-leasequery-edit-forwarding-options.html
Security Bulletin
2	JSA11158	https://kb.juniper.net/JSA11158

Change Log

No	Changed Details	Date of change
1	[2021年12月17日] 掲載	Dec. 17, 2021, 1:49 p.m.

NVD Vulnerability Information

CVE-2021-0267

Summary	An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically configured for Broadband Subscriber Sessions. Continued receipt and processing of this crafted packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2. This issue does not affect Junos OS Evolved.
Publication Date	April 23, 2021, 5:15 a.m.
Registration Date	April 23, 2021, 10:02 a.m.
Last Update	Nov. 21, 2024, 2:42 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://kb.juniper.net/JSA11158	Vendor Advisory
2	https://kb.juniper.net/JSA11158	Vendor Advisory
3	https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/ref/statement/active-leasequery-edit-forwarding-options.html	Vendor Advisory
4	https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/ref/statement/active-leasequery-edit-forwarding-options.html	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html