Sistemas Afectados

• 17.2R1-S7, 17.2R1-S8, 17.2R3 and later versions prior to 17.2R3-S4;
• 17.3 versions prior to 17.3R3-S9;
• 17.4 versions prior to 17.4R2-S11, 17.4R3-S2;
• 18.1 versions prior to 18.1R3-S11;
• 18.2 versions prior to 18.2R3-S5;
• 18.3 versions prior to 18.3R2-S4, 18.3R3-S3;
• 18.4 versions prior to 18.4R2-S5, 18.4R3-S4;
• 19.1 versions prior to 19.1R2-S2, 19.1R3;
• 19.2 versions prior to 19.2R1-S5, 19.2R2;
• 19.3 versions prior to 19.3R2-S4, 19.3R3;
• 19.4 versions prior to 19.4R1-S3, 19.4R2.

Descripción

Juniper ha notificado una falla al reenviar paquetes IPv6 por la tarjeta Ethernet de gestión lo que permite a un atacante activar un Kernel Panic en el Sistema Operativo provocando una denegación de Servicio.

Referencia

• CVE-2021-0258
• 2021-04 Security Bulletin: Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface.

Solución

• Juniper recomienda migrar a las plataformas siguientes que ya han corregido dicha vulnerabilidad.
• Junos OS 17.2R3-S4, 17.3R3-S9, 17.4R2-S11, 17.4R3-S2, 18.1R3-S11, 18.2R3-S5, 18.3R2-S4, 18.3R3-S3, 18.4R2-S5, 18.4R3-S4, 19.1R2-S2, 19.1R3, 19.2R1-S5, 19.2R2, 19.3R2-S4, 19.3R3, 19.4R1-S3, 19.4R2, 20.1R1 o superior.