PT-2024-6540 · Juniper Networks · Junos+1

Published 2024-06-25 · Updated 2024-08-12 · CVE-2024-39558

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S10 Junos OS versions from 21.2 before 21.2R3-S7 Junos OS versions from 21.4 before 21.4R3-S6 Junos OS versions from 22.1 before 22.1R3-S5 Junos OS versions from 22.2 before 22.2R3-S3 Junos OS versions from 22.3 before 22.3R3 Junos OS versions from 22.4 before 22.4R2 Junos OS Evolved versions prior to 20.4R3-S10-EVO Junos OS Evolved versions of 21.2-EVO Junos OS Evolved versions from 21.4-EVO before 21.4R3-S9-EVO Junos OS Evolved versions from 22.1-EVO before 22.1R3-S5-EVO Junos OS Evolved versions from 22.2-EVO before 22.2R3-S3-EVO Junos OS Evolved versions from 22.3-EVO before 22.3R3-EVO Junos OS Evolved versions from 22.4-EVO before 22.4R2-EVO

Description: The issue is related to an Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks Junos OS and Juniper Networks Junos OS Evolved. This vulnerability allows a logically adjacent, unauthenticated attacker to cause rpd to crash and restart by sending a specific PIM packet, resulting in a Denial of Service (DoS) when PIM is configured with Multicast-only Fast Reroute (MoFRR). Continued receipt and processing of this packet may create a sustained Denial of Service (DoS) condition. The issue is observed on Junos and Junos Evolved platforms where PIM is configured along with MoFRR, and it is caused by an internal timing issue that prevents rpd from selecting the forwarding next-hop towards the source.

Recommendations: For Junos OS versions prior to 20.4R3-S10, update to version 20.4R3-S10 or later. For Junos OS versions from 21.2 before 21.2R3-S7, update to version 21.2R3-S7 or later. For Junos OS versions from 21.4 before 21.4R3-S6, update to version 21.4R3-S6 or later. For Junos OS versions from 22.1 before 22.1R3-S5, update to version 22.1R3-S5 or later. For Junos OS versions from 22.2 before 22.2R3-S3, update to version 22.2R3-S3 or later. For Junos OS versions from 22.3 before 22.3R3, update to version 22.3R3 or later. For Junos OS versions from 22.4 before 22.4R2, update to version 22.4R2 or later. For Junos OS Evolved versions prior to 20.4R3-S10-EVO, update to version 20.4R3-S10-EVO or later. For Junos OS Evolved versions of 21.2-EVO, update to a version that is not affected. For Junos OS Evolved versions from 21.4-EVO before 21.4R3-S9-EVO, update to version 21.4R3-S9-EVO or later. For Junos OS Evolved versions from 22.1-EVO before 22.1R3-S5-EVO, update to version 22.1R3-S5-EVO or later. For Junos OS Evolved versions from 22.2-EVO before 22.2R3-S3-EVO, update to version 22.2R3-S3-EVO or later. For Junos OS Evolved versions from 22.3-EVO before 22.3R3-EVO, update to version 22.3R3-EVO or later. For Junos OS Evolved versions from 22.4-EVO before 22.4R2-EVO, update to version 22.4R2-EVO or later.

Fix

DoS

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2024-07684

CVE-2024-39558

Affected Products

Junos

Junos Evolved

References · 9

• https://bdu.fstec.ru/vul/2024-07684 · Security Note
• https://supportportal.juniper.net/JSA83018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39558 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39558 · Vendor Advisory
• https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-specific-PIM-packet-causes-rpd-crash-when-PIM-is-configured-along-with-MoFRR-CVE-2024-39558?language=en_US · Note
• https://vuldb.com/?id.271114 · Note
• https://t.me/cvedetector/608 · Telegram Post
• https://twitter.com/CVEnew/status/1811322685693317607 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1811200942680817911 · Twitter Post