CVE:CVE-2021-31383
CNNVD:CNNVD-202110-945
Juniper Networks Junos OS和Junos OS Evolved都是美国瞻博网络（Juniper Networks）公司的产品。Juniper Networks Junos OS是一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。Junos OS Evolved是Junos OS 的升级版系统。
Juniper Networks Junos OS和Junos OS Evolved存在安全漏洞，该漏洞源于在点对多点 (P2MP) 场景中，对由Juniper Networks路由协议守护程序 (RPD) 处理的某些特定数据包的源到目标复制写入操作的不当使用与基于堆栈的缓冲区溢出相结合未经身份验证的远程网络攻击者发送的网络 Junos OS 和 Junos OS Evolved 导致 RPD 崩溃，从而导致拒绝服务 (DoS)。
solution:Upgrade juniper junos to a higher version than 19.2,19.2:r1,19.2:r1-s1,19.2:r1-s2,19.2:r1-s3,19.2:r1-s4,19.2:r1-s5,19.2:r1-s6,19.2:r2,19.2:r2-s1,19.2:r3,19.2:r3-s1,19.3,19.3:r1,19.3:r1-s1,19.3:r2,19.3:r2-s1,19.3:r2-s2,19.3:r2-s3,19.3:r2-s4,19.3:r2-s5,19.3:r3,19.3:r3-s1,19.4:r1,19.4:r1-s1,19.4:r1-s2,19.4:r1-s3,19.4:r2,19.4:r2-s1,19.4:r2-s2,19.4:r2-s3,19.4:r3,19.4:r3-s1,19.4:r3-s2,20.1:r1,20.1:r1-s1,20.1:r1-s2,20.1:r1-s3,20.1:r1-s4,20.1:r2,20.1:r2-s1,20.2:r1,20.2:r1-s1,20.2:r1-s2,20.2:r1-s3,20.2:r2,20.2:r2-s1,20.2:r2-s2,20.3:r1,20.3:r1-s1,and avoid the version 19.2,19.2:r1,19.2:r1-s1,19.2:r1-s2,19.2:r1-s3,19.2:r1-s4,19.2:r1-s5,19.2:r1-s6,19.2:r2,19.2:r2-s1,19.2:r3,19.2:r3-s1,19.3,19.3:r1,19.3:r1-s1,19.3:r2,19.3:r2-s1,19.3:r2-s2,19.3:r2-s3,19.3:r2-s4,19.3:r2-s5,19.3:r3,19.3:r3-s1,19.4:r1,19.4:r1-s1,19.4:r1-s2,19.4:r1-s3,19.4:r2,19.4:r2-s1,19.4:r2-s2,19.4:r2-s3,19.4:r3,19.4:r3-s1,19.4:r3-s2,20.1:r1,20.1:r1-s1,20.1:r1-s2,20.1:r1-s3,20.1:r1-s4,20.1:r2,20.1:r2-s1,20.2:r1,20.2:r1-s1,20.2:r1-s2,20.2:r1-s3,20.2:r2,20.2:r2-s1,20.2:r2-s2,20.3:r1,20.3:r1-s1; Upgrade juniper junos_os_evolved to a higher version than 20.1,20.1:r1,20.1:r1-s1,20.1:r2,20.1:r2-s1,20.1:r2-s2,20.1:r2-s3,20.1:r2-s4,20.1:r2-s5,20.2,20.2:r1,20.2:r1-s1,20.2:r2,20.2:r2-s1,20.3,20.3:r1,20.3:r1-s1,20.3:r1-s2,20.3:r1-s3,and avoid the version 20.1,20.1:r1,20.1:r1-s1,20.1:r2,20.1:r2-s1,20.1:r2-s2,20.1:r2-s3,20.1:r2-s4,20.1:r2-s5,20.2,20.2:r1,20.2:r1-s1,20.2:r2,20.2:r2-s1,20.3,20.3:r1,20.3:r1-s1,20.3:r1-s2,20.3:r1-s3