CVE-2021-0230— Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics
Quick assessment
Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在资源管理错误漏洞，该漏洞源于操作系统平台存在内存泄漏。
Possible ATT&CK Techniques 2 AI
T1499 · Endpoint Denial of Service T1499.002 · Service Exhaustion Flood
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-0230
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics
Source: CVE Program / CVE List V5
Vulnerability Description
On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggregated Ethernet (AE) interface statistics, including but not limited to SNMP GET requests, causes a slow kernel memory leak. If all the available memory is consumed, the traffic will be impacted and a reboot might be required. The following log can be seen if this issue happens. /kernel: rt_pfe_veto: Memory over consumed. Op 1 err 12, rtsm_id 0:-1, msg type 72 /kernel: rt_pfe_veto: free kmem_map memory = (20770816) curproc = kmd An administrator can use the following CLI command to monitor the status of memory consumption (ifstat bucket): user@device > show system virtual-memory no-forwarding | match ifstat Type InUse MemUse HighUse Limit Requests Limit Limit Size(s) ifstat 2588977 162708K - 19633958 <<<< user@device > show system virtual-memory no-forwarding | match ifstat Type InUse MemUse HighUse Limit Requests Limit Limit Size(s) ifstat 3021629 189749K - 22914415 <<<< This issue affects Juniper Networks Junos OS on SRX Series: 17.1 versions 17.1R3 and above prior to 17.3R3-S11; 17.4 versions prior to 17.4R3-S5; 18.2 versions prior to 18.2R3-S7, 18.2R3-S8; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R1-S2, 20.3R2. This issue does not affect Juniper Networks Junos OS prior to 17.1R3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在资源管理错误漏洞，该漏洞源于操作系统平台存在内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 17.1R3 ~ 17.1* | - |
|
| Juniper Networks | Junos OS | unspecified ~ 17.1R3 | - |
|
II. Public POCs for CVE-2021-0230
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-0230
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-0230 (1)
-
https://kb.juniper.net/JSA11125 x_refsource_MISC
Same Patch Batch · Juniper Networks · 2021-04-22 · 53 CVEs total
| CVE-2021-0248 | 10.0 CRITICAL | NFX Series: Hard-coded credentials allow an attacker to take control of any instance throu |
| CVE-2021-0254 | 9.8 CRITICAL | Junos OS: Remote code execution vulnerability in overlayd service |
| CVE-2021-0275 | 8.8 HIGH | Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another |
| CVE-2021-0269 | 8.8 HIGH | Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution |
| CVE-2021-0268 | 8.8 HIGH | Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which |
| CVE-2021-0251 | 8.6 HIGH | Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services s |
| CVE-2021-0249 | 8.1 HIGH | Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbi |
| CVE-2021-0266 | 8.1 HIGH | cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the devic |
| CVE-2021-0265 | 8.1 HIGH | Contrail Insights: The REST API implementation allows an unauthenticated remote attacker t |
| CVE-2021-0245 | 7.8 HIGH | Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authe |
| CVE-2021-0252 | 7.8 HIGH | Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escala |
| CVE-2021-0253 | 7.8 HIGH | Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Esc |
| CVE-2021-0250 | 7.5 HIGH | Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message w |
| CVE-2021-0270 | 7.5 HIGH | Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inli |
| CVE-2021-0227 | 7.5 HIGH | Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets |
| CVE-2021-0261 | 7.5 HIGH | Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services cau |
| CVE-2021-0233 | 7.5 HIGH | Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while process |
| CVE-2021-0240 | 7.4 HIGH | Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart. |
| CVE-2021-0259 | 7.4 HIGH | Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be process |
| CVE-2021-0267 | 7.4 HIGH | Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core. |
Showing top 20 of 53 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57027
Junos OS: EX4100 Series, EX4400: With sFlow configured in a
Same vendor: Juniper Networks
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
Same weakness: CWE-400
-
CVE-2026-103000
pypdf: Possible large memory usage when retrieving alphabeti -
CVE-2026-102999
pypdf: Possible long runtimes with large amount of embedded -
CVE-2026-102998
pypdf: Possible long runtimes when generating appearance str -
CVE-2026-102997
pypdf: Possible long runtimes for partially malformed FlateD -
CVE-2026-102996
pypdf: Possible large memory usage when parsing font data
V. Comments for CVE-2021-0230
No comments yet