VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Oct 19, 2021· Updated Jun 17, 2026

CVE-2021-0298

CVE-2021-0298

Description

A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other system events outside the attacker's control, leading to a Denial of Service (DoS) condition. Continued execution of the CLI command, under precise conditions, could create a sustained Denial of Service (DoS) condition. This issue affects all Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO on PTX10003 and PTX10008 platforms. Junos OS is not affected by this vulnerability.

Affected products

15
  • Juniper Networks/OS Evolved13 versions
    cpe:2.3:o:juniper:junos_os_evolved:18.3:r1:*:*:*:*:*:*+ 12 more
    • cpe:2.3:o:juniper:junos_os_evolved:18.3:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.1:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.1:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*
    • (no CPE)range: <20.1R2-EVO
    • (no CPE)range: unspecified
  • Juniper Networks/PTX10008llm-create
    Range: <20.1R2-EVO
  • Juniper Networks/PTX10003llm-fuzzy
    Range: <20.1R2-EVO

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.