Juniper Networks Junos OS 输入验证错误漏洞

漏洞介绍

Juniper Networks Junos OS和Junos OS Evolved都是美国瞻博网络（Juniper Networks）公司的产品。Juniper Networks Junos OS是一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。Junos OS Evolved是Junos OS的升级版。Junos OS Evolved是Junos OS 的升级版系统。

Junos OS 存在输入验证错误漏洞，攻击者可利用该漏洞通过Junos的双向LSP RSVP触发致命错误，从而触发拒绝服务。以下产品及版本受到影响：Junos OS： All versions prior to 17.3R3-S10 except 15.1X49-D240 for SRX series; 17.4 versions prior to 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R3-S3; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R1-S4, 20.1R2; 15.1X49 versions prior to 15.1X49-D240 on SRX Series. Juniper Networks Junos OS Evolved： 19.3 versions prior to 19.3R2-S5-EVO; 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S4-EVO.

漏洞补丁

目前厂商已发布升级了Juniper Networks Junos OS 输入验证错误漏洞的补丁，Juniper Networks Junos OS 输入验证错误漏洞的补丁获取链接：

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11098&actp=LIST_RECENT

参考网址

来源:CONFIRM

链接：https://kb.juniper.net/JSA11098

来源:MISC

链接：https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/corouted-bidirectional-edit-protocols-mpls.html

来源:MISC

链接：https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/disable-edit-protocols-rsvp.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2021.0176/

来源:vigilance.fr

链接：https://vigilance.fr/vulnerability/Junos-OS-denial-of-service-via-Bidirectional-LSP-RSVP-34328

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202101-1110