CVE-2021-0276: Juniper Networks SBR Carrier, грешка в паметта

Описание

Оригинално описание

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service (DoS) or leading to remote code execution (RCE). By continuously sending this specific packets, an attacker can repeatedly crash the radius daemon, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R19; 8.5.0 versions prior to 8.5.0R10; 8.6.0 versions prior to 8.6.0R4.

Засегнати продукти

• Juniper Networks SBR Carrier: 8.4.1 преди 8.4.1R19; 8.5.0 преди 8.5.0R10; 8.6.0 преди 8.6.0R4

Вид слабост

• CWE-121 Препълване на буфера в стека

История

Други уязвимости в Juniper Networks SBR Carrier

• 5.6CVE-2019-0072

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-0276
• https://nvd.nist.gov/vuln/detail/CVE-2021-0276
• https://kb.juniper.net/JSA11180