7.1

CVE-2024-39519

Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a 

Denial-of-Service (DoS).

On all ACX 7000 Series platforms running 

Junos OS Evolved, and configured with IRBs, if a Customer Edge device (CE) device is dual homed to two Provider Edge devices (PE) a traffic loop will occur when the CE sends multicast packets. This issue can be triggered by IPv4 and IPv6 traffic.


This issue affects Junos OS Evolved: 

All versions from 22.2R1-EVO and later versions before 22.4R2-EVO,

This issue does not affect Junos OS Evolved versions before 22.1R1-EVO.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Os Evolved Version >= 22.2 < 22.4
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx7100-32c Version -
   Juniper ≫ Acx7100-48l Version -
   Juniper ≫ Acx7332 Version -
   Juniper ≫ Acx7348 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 22.4 Update -
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx7100-32c Version -
   Juniper ≫ Acx7100-48l Version -
   Juniper ≫ Acx7332 Version -
   Juniper ≫ Acx7348 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 22.4 Update r1
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx7100-32c Version -
   Juniper ≫ Acx7100-48l Version -
   Juniper ≫ Acx7332 Version -
   Juniper ≫ Acx7348 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 22.4 Update r1-s1
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx7100-32c Version -
   Juniper ≫ Acx7100-48l Version -
   Juniper ≫ Acx7332 Version -
   Juniper ≫ Acx7348 Version -
   Juniper ≫ Acx7509 Version -
Juniper ≫ Junos Os Evolved Version 22.4 Update r1-s2
   Juniper ≫ Acx7024 Version -
   Juniper ≫ Acx7024x Version -
   Juniper ≫ Acx7100-32c Version -
   Juniper ≫ Acx7100-48l Version -
   Juniper ≫ Acx7332 Version -
   Juniper ≫ Acx7348 Version -
   Juniper ≫ Acx7509 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.155
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Juniper 7.1 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Juniper 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://supportportal.juniper.net/JSA82983
Vendor Advisory