PT-2024-7143 · Juniper Networks · Junos Evolved

Published

2024-09-25

·

Updated

2026-01-26

·

CVE-2024-47490

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:N/C:N/I:P/A:C
Name of the Vulnerable Software and Affected Versions Junos OS Evolved versions prior to 21.4R3-S9-EVO Junos OS Evolved version 22.2-EVO prior to 22.2R3-S4-EVO Junos OS Evolved version 22.3-EVO prior to 22.3R3-S3-EVO Junos OS Evolved version 22.4-EVO prior to 22.4R3-S2-EVO Junos OS Evolved version 23.2-EVO prior to 23.2R2-EVO Junos OS Evolved version 23.4-EVO prior to 23.4R1-S1-EVO, 23.4R2-EVO
Description The issue is related to an improper restriction of communication channels for intended endpoints in the Packet Forwarding Engine (PFE) of Junos OS Evolved. This can be exploited by an unauthenticated, network-based attacker to cause increased consumption of resources, ultimately resulting in a Denial of Service (DoS). The vulnerability is triggered when specific transit MPLS packets are received by the PFE and are internally forwarded to the Routing Engine (RE) instead of being handled appropriately. Continuous receipt of these MPLS packets causes resources to be exhausted. MPLS configuration is not required to be affected by this issue.
Recommendations For versions prior to 21.4R3-S9-EVO, update to version 21.4R3-S9-EVO or later. For version 22.2-EVO prior to 22.2R3-S4-EVO, update to version 22.2R3-S4-EVO or later. For version 22.3-EVO prior to 22.3R3-S3-EVO, update to version 22.3R3-S3-EVO or later. For version 22.4-EVO prior to 22.4R3-S2-EVO, update to version 22.4R3-S2-EVO or later. For version 23.2-EVO prior to 23.2R2-EVO, update to version 23.2R2-EVO or later. For version 23.4-EVO prior to 23.4R1-S1-EVO, 23.4R2-EVO, update to version 23.4R1-S1-EVO or 23.4R2-EVO or later.

Fix

DoS

Weakness Enumeration

CWE-923

Related Identifiers

BDU:2024-08474
CVE-2024-47490

Affected Products

Junos Evolved