Vulnerability · Published Oct 11, 2024 · Assigned by juniper

CVE-2024-47506Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash

Medium 5.9

In plain English

A medium-severity security flaw in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium

Exploit odds (30 days)0.3%top 78.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a large amount of traffic is processed by ATP Cloud inspection, a deadlock can occur which will result in a PFE crash and restart. Whether the crash occurs, depends on system internal timing that is outside the attackers control. This issue affects Junos OS on SRX Series: * All versions before 21.3R3-S1, * 21.4 versions before 21.4R3, * 22.1 versions before 22.1R2, * 22.2 versions before 22.2R1-S2, 22.2R2.

Affected products (as reported)

Vendor	Product	Versions
Juniper Networks	Junos OS	0 – before 21.3R3-S121.4 – before 21.4R322.1 – before 22.1R222.2 – before 22.2R1-S2, 22.2R2

Weakness: CWE-833 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://supportportal.juniper.net/JSA88137 vendor-advisory