CVE-2021-0254

CVE-2021-0254 is a critical buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS, affecting MX, ACX, and QFX Series platforms, and other platforms with configured VXLAN. This flaw allows unauthenticated remote attackers to send specially crafted packets, leading to a partial Denial of Service or potential remote code execution. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, posing a high risk of complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.