CVE:CVE-2021-31363
CNNVD:CNNVD-202110-968
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。
Juniper Networks Junos OS 存在安全漏洞，该漏洞源于在 MPLS P2MP 环境中，瞻博网络 Junos OS 和 Junos OS Evolved 的路由协议守护程序 (RPD) 中存在具有无法访问退出条件的循环漏洞，允许未经身份验证的相邻攻击者对 RPD 造成高负载，进而可能导致路由协议抖动。如果启用了基于传感器的统计信息的系统接收到特定的 LDP FEC，则可能会导致上述情况。继续收到此类 LDP FEC 将产生持续的拒绝服务 (DoS) 条件。
solution:Upgrade juniper junos to a higher version than 19.2:r2,19.2:r2-s1,19.2:r3,19.2:r3-s1,19.2:r3-s2,19.3,19.3:r1,19.3:r1-s1,19.3:r2,19.3:r2-s1,19.3:r2-s2,19.3:r2-s3,19.3:r2-s4,19.3:r2-s5,19.3:r3-s2,19.4:r1,19.4:r1-s1,19.4:r1-s2,19.4:r1-s3,19.4:r2-s4,19.4:r3-s2,20.1:r1,20.1:r1-s1,20.1:r1-s2,20.1:r1-s3,20.1:r1-s4,20.1:r2,20.1:r3,20.2:r1,20.2:r1-s1,20.2:r1-s2,20.2:r1-s3,20.2:r2,20.2:r3,20.3:r1,20.3:r1-s1,20.3:r2,and avoid the version 19.2:r2,19.2:r2-s1,19.2:r3,19.2:r3-s1,19.2:r3-s2,19.3,19.3:r1,19.3:r1-s1,19.3:r2,19.3:r2-s1,19.3:r2-s2,19.3:r2-s3,19.3:r2-s4,19.3:r2-s5,19.3:r3-s2,19.4:r1,19.4:r1-s1,19.4:r1-s2,19.4:r1-s3,19.4:r2-s4,19.4:r3-s2,20.1:r1,20.1:r1-s1,20.1:r1-s2,20.1:r1-s3,20.1:r1-s4,20.1:r2,20.1:r3,20.2:r1,20.2:r1-s1,20.2:r1-s2,20.2:r1-s3,20.2:r2,20.2:r3,20.3:r1,20.3:r1-s1,20.3:r2; Upgrade juniper junos_os_evolved to a higher version than 20.1:r1,20.1:r1-s1,20.1:r2,20.1:r2-s1,20.1:r2-s2,20.2:r1,20.2:r1-s1,20.2:r2,20.3:r1,20.3:r1-s1,and avoid the version 20.1:r1,20.1:r1-s1,20.1:r2,20.1:r2-s1,20.1:r2-s2,20.2:r1,20.2:r1-s1,20.2:r2,20.3:r1,20.3:r1-s1