CVE-2026-21920

Опубликовано: 15 янв. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

If an SRX Series device configured for DNS processing, receives a specifically formatted DNS request flowd will crash and restart, which causes a service interruption until the process has recovered.

This issue affects Junos OS on SRX Series:

23.4 versions before 23.4R2-S5,
24.2 versions before 24.2R2-S1,
24.4 versions before 24.4R2.

This issue does not affect Junos OS versions before 23.4R1.

Ссылки

https://kb.juniper.net/JSA106020
Vendor Advisory
https://supportportal.juniper.net/JSA106020
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*

Одно из

cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00048

Низкий

7.5 High

CVSS3

Дефекты

CWE-252

Связанные уязвимости

GHSA-vj9c-h3r9-jwrf

CVSS3: 7.5

github

23 дня назад

An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an SRX Series device configured for DNS processing, receives a specifically formatted DNS request flowd will crash and restart, which causes a service interruption until the process has recovered. This issue affects Junos OS on SRX Series: * 23.4 versions before 23.4R2-S5, * 24.2 versions before 24.2R2-S1, * 24.4 versions before 24.4R2. This issue does not affect Junos OS versions before 23.4R1.

EPSS

Процентиль: 15%

0.00048

Низкий

7.5 High

CVSS3

Дефекты

CWE-252