CVE-2021-0271

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S17 Juniper Networks Junos OS versions prior to 15.1R7-S8

Description: A Double Free issue in the software forwarding interface daemon (sfid) process allows an adjacently-connected attacker to cause a Denial of Service (DoS) by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets will create a sustained Denial of Service (DoS) condition.

Recommendations: For versions prior to 12.3R12-S17, update to 12.3R12-S17 or later to resolve the issue. For versions prior to 15.1R7-S8, update to 15.1R7-S8 or later to resolve the issue.