CVE-2021-31368— Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic
Quick assessment
Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在资源管理错误漏洞，该漏洞的存在是由于应用程序没有正确控制内核内部资源的消耗。远程攻击者可以触发资源耗尽并执行拒绝服务 (DoS) 攻击。该漏洞允许远程攻击者执行拒绝服务 (DoS) 攻击。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-31368
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic
Source: CVE Program / CVE List V5
Vulnerability Description
An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipted of a flood will create a sustained Denial of Service (DoS) condition. Once the flood subsides the system will recover by itself. An indication that the system is affected by this issue would be that kernel and netisr process are shown to be using a lot of CPU cycles like in the following example output: user@host> show system processes extensive ... PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND 16 root -72 - 0K 304K WAIT 1 839:40 88.96% intr{swi1: netisr 0} 0 root 97 - 0K 160K RUN 1 732:43 87.99% kernel{bcm560xgmac0 que} This issue affects Juniper Networks JUNOS OS on EX2300 Series, EX3400 Series, and ACX710: All versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S8, 18.4R3-S9; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 存在资源管理错误漏洞，该漏洞的存在是由于应用程序没有正确控制内核内部资源的消耗。远程攻击者可以触发资源耗尽并执行拒绝服务 (DoS) 攻击。该漏洞允许远程攻击者执行拒绝服务 (DoS) 攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | unspecified ~ 18.1R3-S13 | - |
|
II. Public POCs for CVE-2021-31368
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-31368
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-31368 (1)
-
https://kb.juniper.net/JSA11230 x_refsource_CONFIRM
Same Patch Batch · Juniper Networks · 2021-10-19 · 42 CVEs total
| CVE-2021-31349 | 9.8 CRITICAL | Session Smart Router: Authentication Bypass Vulnerability |
| CVE-2021-31385 | 8.8 HIGH | Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevat |
| CVE-2021-31372 | 8.8 HIGH | Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to ro |
| CVE-2021-31355 | 8.0 HIGH | Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal |
| CVE-2021-31373 | 8.0 HIGH | Junos OS: SRX Series: Persistent XSS vulnerability in J-Web |
| CVE-2021-31356 | 7.8 HIGH | Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts |
| CVE-2021-31357 | 7.8 HIGH | Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script |
| CVE-2021-31358 | 7.8 HIGH | Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script |
| CVE-2021-31359 | 7.8 HIGH | Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability |
| CVE-2021-31350 | 7.5 HIGH | Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Too |
| CVE-2021-31351 | 7.5 HIGH | Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset |
| CVE-2021-31379 | 7.5 HIGH | Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends ma |
| CVE-2021-31353 | 7.5 HIGH | Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update |
| CVE-2021-31376 | 7.5 HIGH | Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when process |
| CVE-2021-31374 | 7.5 HIGH | Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE o |
| CVE-2021-31383 | 7.5 HIGH | Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various |
| CVE-2021-0299 | 7.5 HIGH | Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet |
| CVE-2021-0296 | 7.4 HIGH | CTPView: HSTS not being enforced on CTPView server. |
| CVE-2021-31384 | 7.2 HIGH | Junos OS: SRX Series: Under a specific device configuration an attacker can access the dev |
| CVE-2021-31375 | 7.2 HIGH | Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57027
Junos OS: EX4100 Series, EX4400: With sFlow configured in a
Same vendor: Juniper Networks
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
Same weakness: CWE-400
-
CVE-2026-103000
pypdf: Possible large memory usage when retrieving alphabeti -
CVE-2026-102999
pypdf: Possible long runtimes with large amount of embedded -
CVE-2026-102998
pypdf: Possible long runtimes when generating appearance str -
CVE-2026-102997
pypdf: Possible long runtimes for partially malformed FlateD -
CVE-2026-102996
pypdf: Possible large memory usage when parsing font data
V. Comments for CVE-2021-31368
No comments yet