CVE-2021-0271

A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service (DoS) by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series. 12.3 versions prior to 12.3R12-S17; 15.1 versions prior to 15.1R7-S8. This issue only affects the listed Marvell-chipset based EX Series devices. No other products or platforms are affected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
juniperCNA
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
VendorProductVersion
juniperjunos
12.3
juniperjunos
12.3:r1
juniperjunos
12.3:r10
juniperjunos
12.3:r10-s1
juniperjunos
12.3:r10-s2
juniperjunos
12.3:r11
juniperjunos
12.3:r12
juniperjunos
12.3:r12-s1
juniperjunos
12.3:r12-s10
juniperjunos
12.3:r12-s11
juniperjunos
12.3:r12-s12
juniperjunos
12.3:r12-s13
juniperjunos
12.3:r12-s14
juniperjunos
12.3:r12-s15
juniperjunos
12.3:r12-s16
juniperjunos
12.3:r12-s3
juniperjunos
12.3:r12-s4
juniperjunos
12.3:r12-s6
juniperjunos
12.3:r12-s8
juniperjunos
15.1
juniperjunos
15.1:a1
juniperjunos
15.1:f
juniperjunos
15.1:f1
juniperjunos
15.1:f2
juniperjunos
15.1:f2-s1
juniperjunos
15.1:f2-s2
juniperjunos
15.1:f2-s3
juniperjunos
15.1:f2-s4
juniperjunos
15.1:f3
juniperjunos
15.1:f4
juniperjunos
15.1:f5
juniperjunos
15.1:f5-s7
juniperjunos
15.1:f6
juniperjunos
15.1:f6-s1
juniperjunos
15.1:f6-s10
juniperjunos
15.1:f6-s12
juniperjunos
15.1:f6-s2
juniperjunos
15.1:f6-s3
juniperjunos
15.1:f6-s4
juniperjunos
15.1:f6-s5
juniperjunos
15.1:f6-s6
juniperjunos
15.1:f6-s7
juniperjunos
15.1:f6-s8
juniperjunos
15.1:f6-s9
juniperjunos
15.1:f7
juniperjunos
15.1:r
juniperjunos
15.1:r1
juniperjunos
15.1:r2
juniperjunos
15.1:r3
juniperjunos
15.1:r4
juniperjunos
15.1:r4-s7
juniperjunos
15.1:r4-s8
juniperjunos
15.1:r4-s9
juniperjunos
15.1:r5
juniperjunos
15.1:r5-s1
juniperjunos
15.1:r5-s3
juniperjunos
15.1:r5-s5
juniperjunos
15.1:r5-s6
juniperjunos
15.1:r6
juniperjunos
15.1:r6-s1
juniperjunos
15.1:r6-s2
juniperjunos
15.1:r6-s3
juniperjunos
15.1:r6-s4
juniperjunos
15.1:r6-s6
juniperjunos
15.1:r7
juniperjunos
15.1:r7-s1
juniperjunos
15.1:r7-s2
juniperjunos
15.1:r7-s3
juniperjunos
15.1:r7-s4
juniperjunos
15.1:r7-s5
juniperjunos
15.1:r7-s6
juniperjunos
15.1:r7-s7
𝑥
= Vulnerable software versions