CVE Vulnerabilities

CVE-2021-31375

Published: Oct 19, 2021 | Modified: Oct 27, 2022
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R2.

Affected Software

Name Vendor Start Version End Version
Junos Juniper 12.3 (including) 12.3 (including)
Junos Juniper 12.3-r1 (including) 12.3-r1 (including)
Junos Juniper 12.3-r10 (including) 12.3-r10 (including)
Junos Juniper 12.3-r10-s1 (including) 12.3-r10-s1 (including)
Junos Juniper 12.3-r10-s2 (including) 12.3-r10-s2 (including)
Junos Juniper 12.3-r11 (including) 12.3-r11 (including)
Junos Juniper 12.3-r12 (including) 12.3-r12 (including)
Junos Juniper 12.3-r12-s1 (including) 12.3-r12-s1 (including)
Junos Juniper 12.3-r12-s10 (including) 12.3-r12-s10 (including)
Junos Juniper 12.3-r12-s11 (including) 12.3-r12-s11 (including)
Junos Juniper 12.3-r12-s12 (including) 12.3-r12-s12 (including)
Junos Juniper 12.3-r12-s13 (including) 12.3-r12-s13 (including)
Junos Juniper 12.3-r12-s14 (including) 12.3-r12-s14 (including)
Junos Juniper 12.3-r12-s15 (including) 12.3-r12-s15 (including)
Junos Juniper 12.3-r12-s16 (including) 12.3-r12-s16 (including)
Junos Juniper 12.3-r12-s17 (including) 12.3-r12-s17 (including)
Junos Juniper 15.1 (including) 15.1 (including)
Junos Juniper 15.1-a1 (including) 15.1-a1 (including)
Junos Juniper 15.1-f (including) 15.1-f (including)
Junos Juniper 15.1-f1 (including) 15.1-f1 (including)
Junos Juniper 15.1-f2 (including) 15.1-f2 (including)
Junos Juniper 15.1-f2-s1 (including) 15.1-f2-s1 (including)
Junos Juniper 15.1-f2-s2 (including) 15.1-f2-s2 (including)
Junos Juniper 15.1-f2-s3 (including) 15.1-f2-s3 (including)
Junos Juniper 15.1-f2-s4 (including) 15.1-f2-s4 (including)
Junos Juniper 15.1-f3 (including) 15.1-f3 (including)
Junos Juniper 15.1-f4 (including) 15.1-f4 (including)
Junos Juniper 15.1-f5 (including) 15.1-f5 (including)
Junos Juniper 15.1-f5-s7 (including) 15.1-f5-s7 (including)
Junos Juniper 15.1-f6 (including) 15.1-f6 (including)
Junos Juniper 15.1-f6-s1 (including) 15.1-f6-s1 (including)
Junos Juniper 15.1-f6-s10 (including) 15.1-f6-s10 (including)
Junos Juniper 15.1-f6-s12 (including) 15.1-f6-s12 (including)
Junos Juniper 15.1-f6-s2 (including) 15.1-f6-s2 (including)
Junos Juniper 15.1-f6-s3 (including) 15.1-f6-s3 (including)
Junos Juniper 15.1-f6-s4 (including) 15.1-f6-s4 (including)
Junos Juniper 15.1-f6-s5 (including) 15.1-f6-s5 (including)
Junos Juniper 15.1-f6-s6 (including) 15.1-f6-s6 (including)
Junos Juniper 15.1-f6-s7 (including) 15.1-f6-s7 (including)
Junos Juniper 15.1-f6-s8 (including) 15.1-f6-s8 (including)
Junos Juniper 15.1-f6-s9 (including) 15.1-f6-s9 (including)
Junos Juniper 15.1-f7 (including) 15.1-f7 (including)
Junos Juniper 15.1-r (including) 15.1-r (including)
Junos Juniper 15.1-r1 (including) 15.1-r1 (including)
Junos Juniper 15.1-r2 (including) 15.1-r2 (including)
Junos Juniper 15.1-r3 (including) 15.1-r3 (including)
Junos Juniper 15.1-r4 (including) 15.1-r4 (including)
Junos Juniper 15.1-r4-s7 (including) 15.1-r4-s7 (including)
Junos Juniper 15.1-r4-s8 (including) 15.1-r4-s8 (including)
Junos Juniper 15.1-r4-s9 (including) 15.1-r4-s9 (including)
Junos Juniper 15.1-r5 (including) 15.1-r5 (including)
Junos Juniper 15.1-r5-s1 (including) 15.1-r5-s1 (including)
Junos Juniper 15.1-r5-s3 (including) 15.1-r5-s3 (including)
Junos Juniper 15.1-r5-s5 (including) 15.1-r5-s5 (including)
Junos Juniper 15.1-r5-s6 (including) 15.1-r5-s6 (including)
Junos Juniper 15.1-r6 (including) 15.1-r6 (including)
Junos Juniper 15.1-r6-s1 (including) 15.1-r6-s1 (including)
Junos Juniper 15.1-r6-s2 (including) 15.1-r6-s2 (including)
Junos Juniper 15.1-r6-s3 (including) 15.1-r6-s3 (including)
Junos Juniper 15.1-r6-s4 (including) 15.1-r6-s4 (including)
Junos Juniper 15.1-r6-s6 (including) 15.1-r6-s6 (including)
Junos Juniper 15.1-r7 (including) 15.1-r7 (including)
Junos Juniper 15.1-r7-s1 (including) 15.1-r7-s1 (including)
Junos Juniper 15.1-r7-s2 (including) 15.1-r7-s2 (including)
Junos Juniper 15.1-r7-s3 (including) 15.1-r7-s3 (including)
Junos Juniper 15.1-r7-s4 (including) 15.1-r7-s4 (including)
Junos Juniper 15.1-r7-s5 (including) 15.1-r7-s5 (including)
Junos Juniper 15.1-r7-s6 (including) 15.1-r7-s6 (including)
Junos Juniper 15.1-r7-s7 (including) 15.1-r7-s7 (including)
Junos Juniper 15.1-r7-s8 (including) 15.1-r7-s8 (including)
Junos Juniper 17.2 (including) 17.2 (including)
Junos Juniper 17.2-r1 (including) 17.2-r1 (including)
Junos Juniper 17.2-r1-s1 (including) 17.2-r1-s1 (including)
Junos Juniper 17.2-r1-s2 (including) 17.2-r1-s2 (including)
Junos Juniper 17.2-r1-s3 (including) 17.2-r1-s3 (including)
Junos Juniper 17.2-r1-s4 (including) 17.2-r1-s4 (including)
Junos Juniper 17.2-r1-s5 (including) 17.2-r1-s5 (including)
Junos Juniper 17.2-r1-s6 (including) 17.2-r1-s6 (including)
Junos Juniper 17.2-r1-s7 (including) 17.2-r1-s7 (including)
Junos Juniper 17.2-r1-s8 (including) 17.2-r1-s8 (including)
Junos Juniper 17.2-r2 (including) 17.2-r2 (including)
Junos Juniper 17.2-r2-s11 (including) 17.2-r2-s11 (including)
Junos Juniper 17.2-r2-s4 (including) 17.2-r2-s4 (including)
Junos Juniper 17.2-r2-s6 (including) 17.2-r2-s6 (including)
Junos Juniper 17.2-r2-s7 (including) 17.2-r2-s7 (including)
Junos Juniper 17.2-r3 (including) 17.2-r3 (including)
Junos Juniper 17.2-r3-s1 (including) 17.2-r3-s1 (including)
Junos Juniper 17.2-r3-s2 (including) 17.2-r3-s2 (including)
Junos Juniper 17.3 (including) 17.3 (including)
Junos Juniper 17.3-r1 (including) 17.3-r1 (including)
Junos Juniper 17.3-r1-s1 (including) 17.3-r1-s1 (including)
Junos Juniper 17.3-r1-s4 (including) 17.3-r1-s4 (including)
Junos Juniper 17.3-r2 (including) 17.3-r2 (including)
Junos Juniper 17.3-r2-s1 (including) 17.3-r2-s1 (including)
Junos Juniper 17.3-r2-s2 (including) 17.3-r2-s2 (including)
Junos Juniper 17.3-r2-s3 (including) 17.3-r2-s3 (including)
Junos Juniper 17.3-r2-s4 (including) 17.3-r2-s4 (including)
Junos Juniper 17.3-r2-s5 (including) 17.3-r2-s5 (including)
Junos Juniper 17.3-r3 (including) 17.3-r3 (including)
Junos Juniper 17.3-r3-s1 (including) 17.3-r3-s1 (including)
Junos Juniper 17.3-r3-s2 (including) 17.3-r3-s2 (including)
Junos Juniper 17.3-r3-s3 (including) 17.3-r3-s3 (including)
Junos Juniper 17.3-r3-s4 (including) 17.3-r3-s4 (including)
Junos Juniper 17.3-r3-s5 (including) 17.3-r3-s5 (including)
Junos Juniper 17.3-r3-s6 (including) 17.3-r3-s6 (including)
Junos Juniper 17.4 (including) 17.4 (including)
Junos Juniper 17.4-r1 (including) 17.4-r1 (including)
Junos Juniper 17.4-r1-s1 (including) 17.4-r1-s1 (including)
Junos Juniper 17.4-r1-s2 (including) 17.4-r1-s2 (including)
Junos Juniper 17.4-r1-s3 (including) 17.4-r1-s3 (including)
Junos Juniper 17.4-r1-s4 (including) 17.4-r1-s4 (including)
Junos Juniper 17.4-r1-s5 (including) 17.4-r1-s5 (including)
Junos Juniper 17.4-r1-s6 (including) 17.4-r1-s6 (including)
Junos Juniper 17.4-r1-s7 (including) 17.4-r1-s7 (including)
Junos Juniper 17.4-r2 (including) 17.4-r2 (including)
Junos Juniper 17.4-r2-s1 (including) 17.4-r2-s1 (including)
Junos Juniper 17.4-r2-s2 (including) 17.4-r2-s2 (including)
Junos Juniper 17.4-r2-s3 (including) 17.4-r2-s3 (including)
Junos Juniper 17.4-r2-s4 (including) 17.4-r2-s4 (including)
Junos Juniper 17.4-r2-s5 (including) 17.4-r2-s5 (including)
Junos Juniper 17.4-r2-s6 (including) 17.4-r2-s6 (including)
Junos Juniper 17.4-r2-s7 (including) 17.4-r2-s7 (including)
Junos Juniper 17.4-r2-s8 (including) 17.4-r2-s8 (including)
Junos Juniper 18.1 (including) 18.1 (including)
Junos Juniper 18.1-r1 (including) 18.1-r1 (including)
Junos Juniper 18.1-r2 (including) 18.1-r2 (including)
Junos Juniper 18.1-r2-s1 (including) 18.1-r2-s1 (including)
Junos Juniper 18.1-r2-s2 (including) 18.1-r2-s2 (including)
Junos Juniper 18.1-r2-s4 (including) 18.1-r2-s4 (including)
Junos Juniper 18.1-r3 (including) 18.1-r3 (including)
Junos Juniper 18.1-r3-s1 (including) 18.1-r3-s1 (including)
Junos Juniper 18.1-r3-s10 (including) 18.1-r3-s10 (including)
Junos Juniper 18.1-r3-s11 (including) 18.1-r3-s11 (including)
Junos Juniper 18.1-r3-s12 (including) 18.1-r3-s12 (including)
Junos Juniper 18.1-r3-s2 (including) 18.1-r3-s2 (including)
Junos Juniper 18.1-r3-s3 (including) 18.1-r3-s3 (including)
Junos Juniper 18.1-r3-s4 (including) 18.1-r3-s4 (including)
Junos Juniper 18.1-r3-s5 (including) 18.1-r3-s5 (including)
Junos Juniper 18.1-r3-s6 (including) 18.1-r3-s6 (including)
Junos Juniper 18.1-r3-s7 (including) 18.1-r3-s7 (including)
Junos Juniper 18.1-r3-s8 (including) 18.1-r3-s8 (including)
Junos Juniper 18.1-r3-s9 (including) 18.1-r3-s9 (including)
Junos Juniper 18.2 (including) 18.2 (including)
Junos Juniper 18.2-r1 (including) 18.2-r1 (including)
Junos Juniper 18.2-r1-s2 (including) 18.2-r1-s2 (including)
Junos Juniper 18.2-r1-s3 (including) 18.2-r1-s3 (including)
Junos Juniper 18.2-r1-s4 (including) 18.2-r1-s4 (including)
Junos Juniper 18.2-r1-s5 (including) 18.2-r1-s5 (including)
Junos Juniper 18.2-r2 (including) 18.2-r2 (including)
Junos Juniper 18.2-r2-s1 (including) 18.2-r2-s1 (including)
Junos Juniper 18.2-r2-s2 (including) 18.2-r2-s2 (including)
Junos Juniper 18.2-r2-s3 (including) 18.2-r2-s3 (including)
Junos Juniper 18.2-r2-s4 (including) 18.2-r2-s4 (including)
Junos Juniper 18.2-r2-s5 (including) 18.2-r2-s5 (including)
Junos Juniper 18.2-r2-s6 (including) 18.2-r2-s6 (including)
Junos Juniper 18.2-r2-s7 (including) 18.2-r2-s7 (including)
Junos Juniper 18.2-r3 (including) 18.2-r3 (including)
Junos Juniper 18.2-r3-s1 (including) 18.2-r3-s1 (including)
Junos Juniper 18.2-r3-s2 (including) 18.2-r3-s2 (including)
Junos Juniper 18.3 (including) 18.3 (including)
Junos Juniper 18.3-r1 (including) 18.3-r1 (including)
Junos Juniper 18.3-r1-s1 (including) 18.3-r1-s1 (including)
Junos Juniper 18.3-r1-s2 (including) 18.3-r1-s2 (including)
Junos Juniper 18.3-r1-s3 (including) 18.3-r1-s3 (including)
Junos Juniper 18.3-r1-s4 (including) 18.3-r1-s4 (including)
Junos Juniper 18.3-r1-s5 (including) 18.3-r1-s5 (including)
Junos Juniper 18.3-r1-s6 (including) 18.3-r1-s6 (including)
Junos Juniper 18.3-r2 (including) 18.3-r2 (including)
Junos Juniper 18.3-r2-s1 (including) 18.3-r2-s1 (including)
Junos Juniper 18.3-r2-s2 (including) 18.3-r2-s2 (including)
Junos Juniper 18.3-r2-s3 (including) 18.3-r2-s3 (including)
Junos Juniper 18.3-r2-s4 (including) 18.3-r2-s4 (including)
Junos Juniper 18.3-r3 (including) 18.3-r3 (including)
Junos Juniper 18.4 (including) 18.4 (including)
Junos Juniper 18.4-r1 (including) 18.4-r1 (including)
Junos Juniper 18.4-r1-s1 (including) 18.4-r1-s1 (including)
Junos Juniper 18.4-r1-s2 (including) 18.4-r1-s2 (including)
Junos Juniper 18.4-r1-s3 (including) 18.4-r1-s3 (including)
Junos Juniper 18.4-r1-s4 (including) 18.4-r1-s4 (including)
Junos Juniper 18.4-r1-s5 (including) 18.4-r1-s5 (including)
Junos Juniper 18.4-r1-s6 (including) 18.4-r1-s6 (including)
Junos Juniper 18.4-r1-s7 (including) 18.4-r1-s7 (including)
Junos Juniper 18.4-r2 (including) 18.4-r2 (including)
Junos Juniper 18.4-r2-s1 (including) 18.4-r2-s1 (including)
Junos Juniper 18.4-r2-s2 (including) 18.4-r2-s2 (including)
Junos Juniper 18.4-r2-s3 (including) 18.4-r2-s3 (including)
Junos Juniper 18.4-r2-s4 (including) 18.4-r2-s4 (including)
Junos Juniper 18.4-r2-s5 (including) 18.4-r2-s5 (including)
Junos Juniper 18.4-r2-s6 (including) 18.4-r2-s6 (including)
Junos Juniper 18.4-r2-s7 (including) 18.4-r2-s7 (including)
Junos Juniper 18.4-r2-s8 (including) 18.4-r2-s8 (including)
Junos Juniper 19.1 (including) 19.1 (including)
Junos Juniper 19.1-r1 (including) 19.1-r1 (including)
Junos Juniper 19.1-r1-s1 (including) 19.1-r1-s1 (including)
Junos Juniper 19.1-r1-s2 (including) 19.1-r1-s2 (including)
Junos Juniper 19.1-r1-s3 (including) 19.1-r1-s3 (including)
Junos Juniper 19.1-r1-s4 (including) 19.1-r1-s4 (including)
Junos Juniper 19.1-r1-s5 (including) 19.1-r1-s5 (including)
Junos Juniper 19.1-r1-s6 (including) 19.1-r1-s6 (including)
Junos Juniper 19.2 (including) 19.2 (including)
Junos Juniper 19.2-r1 (including) 19.2-r1 (including)
Junos Juniper 19.2-r1-s1 (including) 19.2-r1-s1 (including)
Junos Juniper 19.2-r1-s2 (including) 19.2-r1-s2 (including)
Junos Juniper 19.2-r1-s3 (including) 19.2-r1-s3 (including)
Junos Juniper 19.2-r1-s4 (including) 19.2-r1-s4 (including)
Junos Juniper 19.2-r1-s5 (including) 19.2-r1-s5 (including)
Junos Juniper 19.2-r1-s6 (including) 19.2-r1-s6 (including)
Junos Juniper 19.3 (including) 19.3 (including)
Junos Juniper 19.3-r1 (including) 19.3-r1 (including)
Junos Juniper 19.3-r1-s1 (including) 19.3-r1-s1 (including)

References