CVE-2024-21593

EPSS 0.3%
Veröffentlicht 12.04.2024 15:15:23
Zuletzt bearbeitet 23.01.2026 16:31:57
Erkennungen
Login

Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash

An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

If an attacker sends a specific MPLS packet, which upon processing, causes an internal loop, that leads to a PFE crash and restart. Continued receipt of these packets leads to a sustained Denial of Service (DoS) condition.
 
Circuit cross-connect (CCC) needs to be configured on the device for it to be affected by this issue.

This issue only affects MX Series with MPC10, MPC11, LC9600, and MX304.

This issue affects:
Juniper Networks Junos OS
21.4 versions from 21.4R3 earlier than 21.4R3-S5;
22.2 versions from 22.2R2 earlier than 22.2R3-S2;
22.3 versions from 22.3R1 earlier than 22.3R2-S2;
22.3 versions from 22.3R3 earlier than 22.3R3-S1
22.4 versions from 22.4R1 earlier than 22.4R2-S2, 22.4R3;
23.2 versions earlier than 23.2R1-S1, 23.2R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 26 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 21.4 Update r3

   Juniper ≫ Lc9600 Version -
   Juniper ≫ Mpc10 Version -
   Juniper ≫ Mpc11 Version -
   Juniper ≫ Mx10004 Version -
   Juniper ≫ Mx10008 Version -
   Juniper ≫ Mx2008 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx2020 Version -
   Juniper ≫ Mx204 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx304 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx960 Version -

Juniper ≫ Junos Version 21.4 Update r3-s1

Juniper ≫ Junos Version 21.4 Update r3-s2

Juniper ≫ Junos Version 21.4 Update r3-s3

Juniper ≫ Junos Version 21.4 Update r3-s4

Juniper ≫ Junos Version 22.2 Update r2

Juniper ≫ Junos Version 22.2 Update r2-s1

Juniper ≫ Junos Version 22.2 Update r2-s2

Juniper ≫ Junos Version 22.2 Update r3

Juniper ≫ Junos Version 22.2 Update r3-s1

Juniper ≫ Junos Version 22.3 Update r1

Juniper ≫ Junos Version 22.3 Update r1-s1

Juniper ≫ Junos Version 22.3 Update r1-s2

Juniper ≫ Junos Version 22.3 Update r2

Juniper ≫ Junos Version 22.3 Update r2-s1

Juniper ≫ Junos Version 22.3 Update r2-s2

Juniper ≫ Junos Version 22.3 Update r3

Juniper ≫ Junos Version 22.4 Update r1

Juniper ≫ Junos Version 22.4 Update r1-s1

Juniper ≫ Junos Version 22.4 Update r1-s2

Juniper ≫ Junos Version 22.4 Update r2

Juniper ≫ Junos Version 22.4 Update r2-s1

Juniper ≫ Junos Version 22.4 Update r3

Juniper ≫ Junos Version 23.2 Update -

Juniper ≫ Junos Version 23.2 Update r1

Juniper ≫ Junos Version 23.2 Update r2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.21

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	7.1	0	0	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Juniper	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-703 Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Technical Description

https://supportportal.juniper.net/JSA75732

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-21593

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-21593

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-21593

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-21593