Vulnerability · Published Jul 11, 2024 · Assigned by juniper
CVE-2024-39528Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash
Medium 5.7
In plain English
A medium-severity use-after-free in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Official description
A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to cause a Denial of Service (DoS).On all Junos OS and Junos Evolved platforms, if a routing-instance deactivation is triggered, and at the same time a specific SNMP request is received, a segmentation fault occurs which causes rpd to crash and restart. This issue affects: Junos OS: * All versions before 21.2R3-S8, * 21.4 versions before 21.4R3-S5, * 22.2 versions before 22.2R3-S3, * 22.3 versions before 22.3R3-S2, * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R2. Junos OS Evolved: * All versions before 21.2R3-S8-EVO, * 21.4-EVO versions before 21.4R3-S5-EVO, * 22.2-EVO versions before 22.2R3-S3-EVO, * 22.3-EVO versions before 22.3R3-S2-EVO, * 22.4-EVO versions before 22.4R3-EVO, * 23.2-EVO versions before 23.2R2-EVO.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | 0 – before 21.2R3-S821.4 – before 21.4R3-S522.2 – before 22.2R3-S322.3 – before 22.3R3-S222.4 – before 22.4R323.2 – before 23.2R2 |
| Juniper Networks | Junos OS Evolved | 0 – before 21.2R3-S8-EVO21.4-EVO – before 21.4R3-S5-EVO22.2-EVO – before 22.2R3-S3-EVO22.3-EVO – before 22.3R3-S2-EVO22.4-EVO – before 22.4R3-EVO23.2-EVO – before 23.2R2-EVO |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
References
- https://supportportal.juniper.net/JSA82987 vendor-advisory