PT-2024-2887 · Juniper Networks · Junos

Published

2024-04-10

·

Updated

2026-01-23

·

CVE-2024-21593

CVSS v4.0

7.1

High

VectorAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 21.4R3 through 21.4R3-S5 Juniper Networks Junos OS versions 22.2R2 through 22.2R3-S2 Juniper Networks Junos OS versions 22.3R1 through 22.3R2-S2 Juniper Networks Junos OS versions 22.3R3 through 22.3R3-S1 Juniper Networks Junos OS versions 22.4R1 through 22.4R2-S2, 22.4R3 Juniper Networks Junos OS versions prior to 23.2R1-S1, 23.2R2
Description An issue in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS) by sending a specific MPLS packet, which causes an internal loop, leading to a PFE crash and restart. The issue affects devices with Circuit cross-connect (CCC) configured. This issue only affects MX Series with MPC10, MPC11, LC9600, and MX304.
Recommendations For versions 21.4R3 through 21.4R3-S5, update to version 21.4R3-S5 or later. For versions 22.2R2 through 22.2R3-S2, update to version 22.2R3-S2 or later. For versions 22.3R1 through 22.3R2-S2, update to version 22.3R2-S2 or later. For versions 22.3R3 through 22.3R3-S1, update to version 22.3R3-S1 or later. For versions 22.4R1 through 22.4R2-S2, 22.4R3, update to a version later than 22.4R2-S2, excluding 22.4R3. For versions prior to 23.2R1-S1, 23.2R2, update to version 23.2R1-S1, 23.2R2 or later. As a temporary workaround, consider disabling the Circuit cross-connect (CCC) configuration until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-703

Related Identifiers

BDU:2024-03051
CVE-2024-21593

Affected Products

Junos