PT-2024-7142 · Juniper Networks · Junos

Published

2024-09-25

·

Updated

2024-10-16

·

CVE-2024-47497

CVSS v4.0

8.7

High

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 21.4R3-S7 Junos OS versions 22.2 prior to 22.2R3-S4 Junos OS versions 22.3 prior to 22.3R3-S3 Junos OS versions 22.4 prior to 22.4R3-S2 Junos OS versions 23.2 prior to 23.2R2-S1 Junos OS versions 23.4 prior to 23.4R1-S2, 23.4R2
Description The issue is related to an Uncontrolled Resource Consumption vulnerability in the http daemon (httpd) of Juniper Networks Junos OS. This vulnerability can be exploited by an unauthenticated, network-based attacker to cause Denial-of-Service (DoS) by sending specific HTTPS connection requests to the device. These requests trigger the creation of processes that are not properly terminated, leading to resource exhaustion over time and ultimately causing the device to crash and restart.
Recommendations For Junos OS versions prior to 21.4R3-S7, update to version 21.4R3-S7 or later. For Junos OS versions 22.2 prior to 22.2R3-S4, update to version 22.2R3-S4 or later. For Junos OS versions 22.3 prior to 22.3R3-S3, update to version 22.3R3-S3 or later. For Junos OS versions 22.4 prior to 22.4R3-S2, update to version 22.4R3-S2 or later. For Junos OS versions 23.2 prior to 23.2R2-S1, update to version 23.2R2-S1 or later. For Junos OS versions 23.4 prior to 23.4R1-S2, 23.4R2, update to a version later than 23.4R1-S2, 23.4R2. As a temporary workaround, consider monitoring resource usage with the command show system processes extensive | match mgd | count to detect potential exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2024-08473
CVE-2024-47497

Affected Products

Junos