CVE-2024-30398
12.04.2024, 16:15
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a high amount of specific traffic is received on a SRX4600 device, due to an error in internal packet handling, a consistent rise in CPU memory utilization occurs. This results in packet drops in the traffic and eventually the PFE crashes. A manual reboot of the PFE will be required to restore the device to original state. This issue affects Junos OS: * 21.2 before21.2R3-S7, * 21.4 before 21.4R3-S6, * 22.1 before 22.1R3-S5, * 22.2 before 22.2R3-S3, * 22.3 before 22.3R3-S2, * 22.4 before 22.4R3, * 23.2 before23.2R1-S2, 23.2R2.Enginsight
Vendor | Product | Version |
---|---|---|
juniper | junos | 21.2r3-s7 < 𝑥 < 21.2r3-s7 |
juniper | junos | 1.4r3-s6 < 𝑥 < 1.4r3-s6 |
juniper | junos | 22.1r3-s5 < 𝑥 < 22.1r3-s5 |
juniper | junos | 22.2r3-s3 < 𝑥 < 22.2r3-s3 |
juniper | junos | 22.3r3-s2 < 𝑥 < 22.3r3-s2 |
juniper | junos | 22.4r3 < 𝑥 < 22.4r3 |
juniper | junos | 23.2r1-s2 < 𝑥 < 23.2r1-s2 |
juniper | junos | 23.2r2 < 𝑥 < 23.2r2 |
juniper | junos | 21.2 |
juniper | junos | 21.2:r1 |
juniper | junos | 21.2:r1-s1 |
juniper | junos | 21.2:r1-s2 |
juniper | junos | 21.2:r2 |
juniper | junos | 21.2:r2-s1 |
juniper | junos | 21.2:r2-s2 |
juniper | junos | 21.2:r3 |
juniper | junos | 21.2:r3-s1 |
juniper | junos | 21.2:r3-s2 |
juniper | junos | 21.2:r3-s3 |
juniper | junos | 21.2:r3-s4 |
juniper | junos | 21.2:r3-s5 |
juniper | junos | 21.2:r3-s6 |
juniper | junos | 21.4 |
juniper | junos | 21.4:r1 |
juniper | junos | 21.4:r1-s1 |
juniper | junos | 21.4:r1-s2 |
juniper | junos | 21.4:r2 |
juniper | junos | 21.4:r2-s1 |
juniper | junos | 21.4:r2-s2 |
juniper | junos | 21.4:r3 |
juniper | junos | 21.4:r3-s1 |
juniper | junos | 21.4:r3-s2 |
juniper | junos | 21.4:r3-s3 |
juniper | junos | 21.4:r3-s4 |
juniper | junos | 21.4:r3-s5 |
juniper | junos | 22.1 |
juniper | junos | 22.1:r1 |
juniper | junos | 22.1:r1-s1 |
juniper | junos | 22.1:r1-s2 |
juniper | junos | 22.1:r2 |
juniper | junos | 22.1:r2-s1 |
juniper | junos | 22.1:r2-s2 |
juniper | junos | 22.1:r3 |
juniper | junos | 22.1:r3-s1 |
juniper | junos | 22.1:r3-s2 |
juniper | junos | 22.1:r3-s3 |
juniper | junos | 22.1:r3-s4 |
juniper | junos | 22.2 |
juniper | junos | 22.2:r1 |
juniper | junos | 22.2:r1-s1 |
juniper | junos | 22.2:r1-s2 |
juniper | junos | 22.2:r2 |
juniper | junos | 22.2:r2-s1 |
juniper | junos | 22.2:r2-s2 |
juniper | junos | 22.2:r3 |
juniper | junos | 22.2:r3-s1 |
juniper | junos | 22.2:r3-s2 |
juniper | junos | 22.3 |
juniper | junos | 22.3:r1 |
juniper | junos | 22.3:r1-s1 |
juniper | junos | 22.3:r1-s2 |
juniper | junos | 22.3:r2 |
juniper | junos | 22.3:r2-s1 |
juniper | junos | 22.3:r2-s2 |
juniper | junos | 22.3:r3 |
juniper | junos | 22.3:r3-s1 |
juniper | junos | 22.4 |
juniper | junos | 22.4:r1 |
juniper | junos | 22.4:r1-s1 |
juniper | junos | 22.4:r1-s2 |
juniper | junos | 22.4:r2 |
juniper | junos | 22.4:r2-s1 |
juniper | junos | 22.4:r2-s2 |
juniper | junos | 23.2 |
juniper | junos | 23.2:r1 |
juniper | junos | 23.2:r1-s1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References