6.8

CVE-2024-39513

Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager

An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service (DoS).

When a specific "clear" command is run, the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) crashes and restarts.

The crash impacts all traffic going through the FPCs, causing a DoS. Running the command repeatedly leads to a sustained DoS condition.
This issue affects Junos OS Evolved: 



  *  All versions before 20.4R3-S9-EVO, 
  *  from 21.2-EVO before 21.2R3-S7-EVO, 
  *  from 21.3-EVO before 21.3R3-S5-EVO, 
  *  from 21.4-EVO before 21.4R3-S6-EVO, 
  *  from 22.1-EVO before 22.1R3-S4-EVO, 
  *  from 22.2-EVO before 22.2R3-S3-EVO, 
  *  from 22.3-EVO before 22.3R3-S3-EVO, 
  *  from 22.4-EVO before 22.4R3-EVO,
  *  from 23.2-EVO before 23.2R2-EVO.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Os Evolved Version < 20.4
Juniper ≫ Junos Os Evolved Version 20.4 Update -
Juniper ≫ Junos Os Evolved Version 20.4 Update r1
Juniper ≫ Junos Os Evolved Version 20.4 Update r1-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r1-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s4
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s5
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s6
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s7
Juniper ≫ Junos Os Evolved Version 20.4 Update r3-s8
Juniper ≫ Junos Os Evolved Version 21.2 Update -
Juniper ≫ Junos Os Evolved Version 21.2 Update r1
Juniper ≫ Junos Os Evolved Version 21.2 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r1-s2
Juniper ≫ Junos Os Evolved Version 21.2 Update r2
Juniper ≫ Junos Os Evolved Version 21.2 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.2 Update r3
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s3
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s4
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s5
Juniper ≫ Junos Os Evolved Version 21.2 Update r3-s6
Juniper ≫ Junos Os Evolved Version 21.3 Update -
Juniper ≫ Junos Os Evolved Version 21.3 Update r1
Juniper ≫ Junos Os Evolved Version 21.3 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.3 Update r2
Juniper ≫ Junos Os Evolved Version 21.3 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.3 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.3 Update r3
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s3
Juniper ≫ Junos Os Evolved Version 21.3 Update r3-s4
Juniper ≫ Junos Os Evolved Version 21.4 Update -
Juniper ≫ Junos Os Evolved Version 21.4 Update r1
Juniper ≫ Junos Os Evolved Version 21.4 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.4 Update r1-s2
Juniper ≫ Junos Os Evolved Version 21.4 Update r2
Juniper ≫ Junos Os Evolved Version 21.4 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.4 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.4 Update r3
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s2
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s3
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s4
Juniper ≫ Junos Os Evolved Version 21.4 Update r3-s5
Juniper ≫ Junos Os Evolved Version 22.1 Update -
Juniper ≫ Junos Os Evolved Version 22.1 Update r1
Juniper ≫ Junos Os Evolved Version 22.1 Update r1-s1
Juniper ≫ Junos Os Evolved Version 22.1 Update r1-s2
Juniper ≫ Junos Os Evolved Version 22.1 Update r2
Juniper ≫ Junos Os Evolved Version 22.1 Update r2-s1
Juniper ≫ Junos Os Evolved Version 22.1 Update r3
Juniper ≫ Junos Os Evolved Version 22.1 Update r3-s1
Juniper ≫ Junos Os Evolved Version 22.1 Update r3-s2
Juniper ≫ Junos Os Evolved Version 22.1 Update r3-s3
Juniper ≫ Junos Os Evolved Version 22.2 Update -
Juniper ≫ Junos Os Evolved Version 22.2 Update r1
Juniper ≫ Junos Os Evolved Version 22.2 Update r1-s1
Juniper ≫ Junos Os Evolved Version 22.2 Update r1-s2
Juniper ≫ Junos Os Evolved Version 22.2 Update r2
Juniper ≫ Junos Os Evolved Version 22.2 Update r2-s1
Juniper ≫ Junos Os Evolved Version 22.2 Update r2-s2
Juniper ≫ Junos Os Evolved Version 22.2 Update r3
Juniper ≫ Junos Os Evolved Version 22.2 Update r3-s1
Juniper ≫ Junos Os Evolved Version 22.2 Update r3-s2
Juniper ≫ Junos Os Evolved Version 22.3 Update -
Juniper ≫ Junos Os Evolved Version 22.3 Update r1
Juniper ≫ Junos Os Evolved Version 22.3 Update r1-s1
Juniper ≫ Junos Os Evolved Version 22.3 Update r1-s2
Juniper ≫ Junos Os Evolved Version 22.3 Update r2
Juniper ≫ Junos Os Evolved Version 22.3 Update r2-s1
Juniper ≫ Junos Os Evolved Version 22.3 Update r2-s2
Juniper ≫ Junos Os Evolved Version 22.3 Update r3
Juniper ≫ Junos Os Evolved Version 22.3 Update r3-s1
Juniper ≫ Junos Os Evolved Version 22.3 Update r3-s2
Juniper ≫ Junos Os Evolved Version 22.4 Update -
Juniper ≫ Junos Os Evolved Version 22.4 Update r1
Juniper ≫ Junos Os Evolved Version 22.4 Update r1-s1
Juniper ≫ Junos Os Evolved Version 22.4 Update r1-s2
Juniper ≫ Junos Os Evolved Version 22.4 Update r2
Juniper ≫ Junos Os Evolved Version 22.4 Update r2-s1
Juniper ≫ Junos Os Evolved Version 22.4 Update r2-s2
Juniper ≫ Junos Os Evolved Version 23.2 Update -
Juniper ≫ Junos Os Evolved Version 23.2 Update r1
Juniper ≫ Junos Os Evolved Version 23.2 Update r1-s1
Juniper ≫ Junos Os Evolved Version 23.2 Update r1-s2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.039
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Juniper 6.8 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:X/U:X
Juniper 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://supportportal.juniper.net/JSA82978
Vendor Advisory