CVE-2024-39539

EPSS 0.22%
Veröffentlicht 11.07.2024 17:15:12
Zuletzt bearbeitet 11.04.2025 14:47:34
Erkennungen
Login

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS).

In a subscriber management scenario continuous subscriber logins will trigger a memory leak and eventually lead to an FPC crash and restart.

This issue affects Junos OS on MX Series:



  *  All version before 21.2R3-S6,
  *  21.4 versions before 21.4R3-S6,
  *  22.1 versions before 22.1R3-S5,
  *  22.2 versions before 22.2R3-S3, 
  *  22.3 versions before 22.3R3-S2,
  *  22.4 versions before 22.4R3,
  *  23.2 versions before 23.2R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 69 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 21.2

   Juniper ≫ Mx Version -
   Juniper ≫ Mx10 Version -
   Juniper ≫ Mx10000 Version -
   Juniper ≫ Mx10003 Version -
   Juniper ≫ Mx10004 Version -
   Juniper ≫ Mx10008 Version -
   Juniper ≫ Mx10016 Version -
   Juniper ≫ Mx104 Version -
   Juniper ≫ Mx150 Version -
   Juniper ≫ Mx2008 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx2020 Version -
   Juniper ≫ Mx204 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx304 Version -
   Juniper ≫ Mx40 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx5 Version -
   Juniper ≫ Mx80 Version -
   Juniper ≫ Mx960 Version -

Juniper ≫ Junos Version 21.2 Update -

Juniper ≫ Junos Version 21.2 Update r1

Juniper ≫ Junos Version 21.2 Update r1-s1

Juniper ≫ Junos Version 21.2 Update r1-s2

Juniper ≫ Junos Version 21.2 Update r2

Juniper ≫ Junos Version 21.2 Update r2-s1

Juniper ≫ Junos Version 21.2 Update r2-s2

Juniper ≫ Junos Version 21.2 Update r3

Juniper ≫ Junos Version 21.2 Update r3-s1

Juniper ≫ Junos Version 21.2 Update r3-s2

Juniper ≫ Junos Version 21.2 Update r3-s3

Juniper ≫ Junos Version 21.2 Update r3-s4

Juniper ≫ Junos Version 21.2 Update r3-s5

Juniper ≫ Junos Version 21.4 Update -

Juniper ≫ Junos Version 21.4 Update r1

Juniper ≫ Junos Version 21.4 Update r1-s1

Juniper ≫ Junos Version 21.4 Update r1-s2

Juniper ≫ Junos Version 21.4 Update r2

Juniper ≫ Junos Version 21.4 Update r2-s1

Juniper ≫ Junos Version 21.4 Update r2-s2

Juniper ≫ Junos Version 21.4 Update r3

Juniper ≫ Junos Version 21.4 Update r3-s1

Juniper ≫ Junos Version 21.4 Update r3-s2

Juniper ≫ Junos Version 21.4 Update r3-s3

Juniper ≫ Junos Version 21.4 Update r3-s4

Juniper ≫ Junos Version 21.4 Update r3-s5

Juniper ≫ Junos Version 22.1 Update -

Juniper ≫ Junos Version 22.1 Update r1

Juniper ≫ Junos Version 22.1 Update r1-s1

Juniper ≫ Junos Version 22.1 Update r1-s2

Juniper ≫ Junos Version 22.1 Update r2

Juniper ≫ Junos Version 22.1 Update r2-s1

Juniper ≫ Junos Version 22.1 Update r2-s2

Juniper ≫ Junos Version 22.1 Update r3

Juniper ≫ Junos Version 22.1 Update r3-s1

Juniper ≫ Junos Version 22.1 Update r3-s2

Juniper ≫ Junos Version 22.1 Update r3-s3

Juniper ≫ Junos Version 22.1 Update r3-s4

Juniper ≫ Junos Version 22.2 Update -

Juniper ≫ Junos Version 22.2 Update r1

Juniper ≫ Junos Version 22.2 Update r1-s1

Juniper ≫ Junos Version 22.2 Update r1-s2

Juniper ≫ Junos Version 22.2 Update r2

Juniper ≫ Junos Version 22.2 Update r2-s1

Juniper ≫ Junos Version 22.2 Update r2-s2

Juniper ≫ Junos Version 22.2 Update r3

Juniper ≫ Junos Version 22.2 Update r3-s1

Juniper ≫ Junos Version 22.2 Update r3-s2

Juniper ≫ Junos Version 22.3 Update -

Juniper ≫ Junos Version 22.3 Update r1

Juniper ≫ Junos Version 22.3 Update r1-s1

Juniper ≫ Junos Version 22.3 Update r1-s2

Juniper ≫ Junos Version 22.3 Update r2

Juniper ≫ Junos Version 22.3 Update r2-s1

Juniper ≫ Junos Version 22.3 Update r2-s2

Juniper ≫ Junos Version 22.3 Update r3

Juniper ≫ Junos Version 22.3 Update r3-s1

Juniper ≫ Junos Version 22.4 Update -

Juniper ≫ Junos Version 22.4 Update r1

Juniper ≫ Junos Version 22.4 Update r1-s1

Juniper ≫ Junos Version 22.4 Update r1-s2

Juniper ≫ Junos Version 22.4 Update r2

Juniper ≫ Junos Version 22.4 Update r2-s1

Juniper ≫ Junos Version 22.4 Update r2-s2

Juniper ≫ Junos Version 23.2 Update -

Juniper ≫ Junos Version 23.2 Update r1

Juniper ≫ Junos Version 23.2 Update r1-s1

Juniper ≫ Junos Version 23.2 Update r1-s2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.119

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	6	0	0	CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Juniper	5.3	1.6	3.6	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://supportportal.juniper.net/JSA82999

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-39539

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-39539

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-39539

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-39539