Juniper Junos OS: 2021-04 Security Bulletin: Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration. (JSA11140) (CVE-2021-0247)
Description
A Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization) vulnerability in the firewall process (dfwd) of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device.
Solution(s)
juniper-junos-os-upgrade-latest
Referenceshttps://attackerkb.com/topics/cve-2021-0247CVE - 2021-0247JSA11140