CVE-2024-39539

EPSS 0.22%
Veröffentlicht 11.07.2024 17:15:12
Zuletzt bearbeitet 11.04.2025 14:47:34
Quelle sirt@juniper.net
CVE-Watchlists
Login
Unerledigt
Login

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS).

In a subscriber management scenario continuous subscriber logins will trigger a memory leak and eventually lead to an FPC crash and restart.

This issue affects Junos OS on MX Series:



  *  All version before 21.2R3-S6,
  *  21.4 versions before 21.4R3-S6,
  *  22.1 versions before 22.1R3-S5,
  *  22.2 versions before 22.2R3-S3, 
  *  22.3 versions before 22.3R3-S2,
  *  22.4 versions before 22.4R3,
  *  23.2 versions before 23.2R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 69 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 21.2

   Juniper ≫ Mx Version-
   Juniper ≫ Mx10 Version-
   Juniper ≫ Mx10000 Version-
   Juniper ≫ Mx10003 Version-
   Juniper ≫ Mx10004 Version-
   Juniper ≫ Mx10008 Version-
   Juniper ≫ Mx10016 Version-
   Juniper ≫ Mx104 Version-
   Juniper ≫ Mx150 Version-
   Juniper ≫ Mx2008 Version-
   Juniper ≫ Mx2010 Version-
   Juniper ≫ Mx2020 Version-
   Juniper ≫ Mx204 Version-
   Juniper ≫ Mx240 Version-
   Juniper ≫ Mx304 Version-
   Juniper ≫ Mx40 Version-
   Juniper ≫ Mx480 Version-
   Juniper ≫ Mx5 Version-
   Juniper ≫ Mx80 Version-
   Juniper ≫ Mx960 Version-

Juniper ≫ Junos Version21.2 Update-

Juniper ≫ Junos Version21.2 Updater1

Juniper ≫ Junos Version21.2 Updater1-s1

Juniper ≫ Junos Version21.2 Updater1-s2

Juniper ≫ Junos Version21.2 Updater2

Juniper ≫ Junos Version21.2 Updater2-s1

Juniper ≫ Junos Version21.2 Updater2-s2

Juniper ≫ Junos Version21.2 Updater3

Juniper ≫ Junos Version21.2 Updater3-s1

Juniper ≫ Junos Version21.2 Updater3-s2

Juniper ≫ Junos Version21.2 Updater3-s3

Juniper ≫ Junos Version21.2 Updater3-s4

Juniper ≫ Junos Version21.2 Updater3-s5

Juniper ≫ Junos Version21.4 Update-

Juniper ≫ Junos Version21.4 Updater1

Juniper ≫ Junos Version21.4 Updater1-s1

Juniper ≫ Junos Version21.4 Updater1-s2

Juniper ≫ Junos Version21.4 Updater2

Juniper ≫ Junos Version21.4 Updater2-s1

Juniper ≫ Junos Version21.4 Updater2-s2

Juniper ≫ Junos Version21.4 Updater3

Juniper ≫ Junos Version21.4 Updater3-s1

Juniper ≫ Junos Version21.4 Updater3-s2

Juniper ≫ Junos Version21.4 Updater3-s3

Juniper ≫ Junos Version21.4 Updater3-s4

Juniper ≫ Junos Version21.4 Updater3-s5

Juniper ≫ Junos Version22.1 Update-

Juniper ≫ Junos Version22.1 Updater1

Juniper ≫ Junos Version22.1 Updater1-s1

Juniper ≫ Junos Version22.1 Updater1-s2

Juniper ≫ Junos Version22.1 Updater2

Juniper ≫ Junos Version22.1 Updater2-s1

Juniper ≫ Junos Version22.1 Updater2-s2

Juniper ≫ Junos Version22.1 Updater3

Juniper ≫ Junos Version22.1 Updater3-s1

Juniper ≫ Junos Version22.1 Updater3-s2

Juniper ≫ Junos Version22.1 Updater3-s3

Juniper ≫ Junos Version22.1 Updater3-s4

Juniper ≫ Junos Version22.2 Update-

Juniper ≫ Junos Version22.2 Updater1

Juniper ≫ Junos Version22.2 Updater1-s1

Juniper ≫ Junos Version22.2 Updater1-s2

Juniper ≫ Junos Version22.2 Updater2

Juniper ≫ Junos Version22.2 Updater2-s1

Juniper ≫ Junos Version22.2 Updater2-s2

Juniper ≫ Junos Version22.2 Updater3

Juniper ≫ Junos Version22.2 Updater3-s1

Juniper ≫ Junos Version22.2 Updater3-s2

Juniper ≫ Junos Version22.3 Update-

Juniper ≫ Junos Version22.3 Updater1

Juniper ≫ Junos Version22.3 Updater1-s1

Juniper ≫ Junos Version22.3 Updater1-s2

Juniper ≫ Junos Version22.3 Updater2

Juniper ≫ Junos Version22.3 Updater2-s1

Juniper ≫ Junos Version22.3 Updater2-s2

Juniper ≫ Junos Version22.3 Updater3

Juniper ≫ Junos Version22.3 Updater3-s1

Juniper ≫ Junos Version22.4 Update-

Juniper ≫ Junos Version22.4 Updater1

Juniper ≫ Junos Version22.4 Updater1-s1

Juniper ≫ Junos Version22.4 Updater1-s2

Juniper ≫ Junos Version22.4 Updater2

Juniper ≫ Junos Version22.4 Updater2-s1

Juniper ≫ Junos Version22.4 Updater2-s2

Juniper ≫ Junos Version23.2 Update-

Juniper ≫ Junos Version23.2 Updater1

Juniper ≫ Junos Version23.2 Updater1-s1

Juniper ≫ Junos Version23.2 Updater1-s2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.119

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
sirt@juniper.net	6	0	0	CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
sirt@juniper.net	5.3	1.6	3.6	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://supportportal.juniper.net/JSA82999

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-39539

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-39539

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-39539

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-39539