PT-2024-5309 · Juniper Networks · Junos Evolved

Published 2024-07-10 · Updated 2024-09-23 · CVE-2024-39519

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Junos OS Evolved versions 22.2R1-EVO through 22.4R2-EVO

Description The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series. This vulnerability allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). The vulnerability can be triggered by IPv4 and IPv6 traffic when a Customer Edge device (CE) is dual homed to two Provider Edge devices (PE) and sends multicast packets, resulting in a traffic loop.

Recommendations For Junos OS Evolved versions 22.2R1-EVO through 22.4R2-EVO, update to version 22.4R2-EVO or later to resolve the issue. As a temporary workaround, consider restricting the use of IRBs on ACX 7000 Series platforms to minimize the risk of exploitation. Additionally, restrict access to the PFE module to prevent unauthorized access.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2024-05937

CVE-2024-39519

Affected Products

Junos Evolved

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-39519 · Security Note
• https://bdu.fstec.ru/vul/2024-05937 · Security Note
• https://supportportal.juniper.net/JSA82983 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-39519 · Vendor Advisory
• https://t.me/cvenotify/85903 · Telegram Post
• https://twitter.com/CVEnew/status/1811434613568422305 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024071603 · Note
• https://t.me/cvedetector/672 · Telegram Post
• https://t.me/cvenotify/95643 · Telegram Post