Log in Start free

Vulnerability · Published Feb 5, 2025 · Assigned by juniper

CVE-2024-39564Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash

High 7.5

In plain English

A high-severity double free in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 63.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This double free of memory is causing an rpd crash, leading to a Denial of Service (DoS). This issue affects: Junos OS:  * from 22.4 before 22.4R3-S4. Junos OS Evolved: * from 22.4 before 22.4R3-S4-EVO.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS 22.4 – before 22.4R3-S4
Juniper Networks Junos OS Evolved 22.4 – before 22.4R3-S3-EVO

Weakness: CWE-415 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References