CVE-2024-30402

EUVD-2024-28323

12.04.2024, 16:15

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

When telemetry requests are sent to the device, and the Dynamic Rendering Daemon (drend) is suspended, the l2ald crashes and restarts due to factors outside the attackers control. Repeated occurrences of these events causes a sustained DoS condition.


This issue affects:
Junos OS:
  *  All versions earlier than 20.4R3-S10;
  *  21.2 versions earlier than 21.2R3-S7;
  *  21.4 versions earlier than 21.4R3-S5;
  *  22.1 versions earlier than 22.1R3-S4;
  *  22.2 versions earlier than 22.2R3-S3;
  *  22.3 versions earlier than 22.3R3-S1;
  *  22.4 versions earlier than 22.4R3;
  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.



Junos OS Evolved:

  *  All versions earlier than 21.4R3-S5-EVO;
  *  22.1-EVO versions earlier than 22.1R3-S4-EVO;
  *  22.2-EVO versions earlier than 22.2R3-S3-EVO;
  *  22.3-EVO versions earlier than 22.3R3-S1-EVO;
  *  22.4-EVO versions earlier than 22.4R3-EVO;
  *  23.2-EVO versions earlier than 23.2R2-EVO.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
juniper	CNA	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 38%

Affected Products (NVD)

Vendor	Product	Version
juniper	junos	𝑥 < 20.4
juniper	junos	20.4
juniper	junos	20.4:r1
juniper	junos	20.4:r1-s1
juniper	junos	20.4:r2
juniper	junos	20.4:r2-s1
juniper	junos	20.4:r2-s2
juniper	junos	20.4:r3
juniper	junos	20.4:r3-s1
juniper	junos	20.4:r3-s2
juniper	junos	20.4:r3-s3
juniper	junos	20.4:r3-s4
juniper	junos	20.4:r3-s5
juniper	junos	20.4:r3-s6
juniper	junos	20.4:r3-s7
juniper	junos	20.4:r3-s8
juniper	junos	20.4:r3-s9
juniper	junos	21.2
juniper	junos	21.2:r1
juniper	junos	21.2:r1-s1
juniper	junos	21.2:r1-s2
juniper	junos	21.2:r2
juniper	junos	21.2:r2-s1
juniper	junos	21.2:r2-s2
juniper	junos	21.2:r3
juniper	junos	21.2:r3-s1
juniper	junos	21.2:r3-s2
juniper	junos	21.2:r3-s3
juniper	junos	21.2:r3-s4
juniper	junos	21.2:r3-s5
juniper	junos	21.2:r3-s6
juniper	junos	21.4
juniper	junos	21.4:r1
juniper	junos	21.4:r1-s1
juniper	junos	21.4:r1-s2
juniper	junos	21.4:r2
juniper	junos	21.4:r2-s1
juniper	junos	21.4:r2-s2
juniper	junos	21.4:r3
juniper	junos	21.4:r3-s1
juniper	junos	21.4:r3-s2
juniper	junos	21.4:r3-s3
juniper	junos	21.4:r3-s4
juniper	junos	22.1
juniper	junos	22.1:r1
juniper	junos	22.1:r1-s1
juniper	junos	22.1:r1-s2
juniper	junos	22.1:r2
juniper	junos	22.1:r2-s1
juniper	junos	22.1:r2-s2
juniper	junos	22.1:r3
juniper	junos	22.1:r3-s1
juniper	junos	22.1:r3-s2
juniper	junos	22.1:r3-s3
juniper	junos	22.2
juniper	junos	22.2:r1
juniper	junos	22.2:r1-s1
juniper	junos	22.2:r1-s2
juniper	junos	22.2:r2
juniper	junos	22.2:r2-s1
juniper	junos	22.2:r2-s2
juniper	junos	22.2:r3
juniper	junos	22.2:r3-s1
juniper	junos	22.2:r3-s2
juniper	junos	22.3
juniper	junos	22.3:r1
juniper	junos	22.3:r1-s1
juniper	junos	22.3:r1-s2
juniper	junos	22.3:r2
juniper	junos	22.3:r2-s1
juniper	junos	22.3:r2-s2
juniper	junos	22.3:r3
juniper	junos	22.4
juniper	junos	22.4:r1
juniper	junos	22.4:r1-s1
juniper	junos	22.4:r1-s2
juniper	junos	22.4:r2
juniper	junos	22.4:r2-s1
juniper	junos	22.4:r2-s2
juniper	junos	23.2
juniper	junos	23.2:r1
juniper	junos	23.2:r1-s1
juniper	junos_os_evolved	𝑥 < 21.4
juniper	junos_os_evolved	21.4
juniper	junos_os_evolved	21.4:r1
juniper	junos_os_evolved	21.4:r1-s1
juniper	junos_os_evolved	21.4:r1-s2
juniper	junos_os_evolved	21.4:r2
juniper	junos_os_evolved	21.4:r2-s1
juniper	junos_os_evolved	21.4:r2-s2
juniper	junos_os_evolved	21.4:r3
juniper	junos_os_evolved	21.4:r3-s1
juniper	junos_os_evolved	21.4:r3-s2
juniper	junos_os_evolved	21.4:r3-s3
juniper	junos_os_evolved	21.4:r3-s4
juniper	junos_os_evolved	22.1
juniper	junos_os_evolved	22.1:r1
juniper	junos_os_evolved	22.1:r1-s1
juniper	junos_os_evolved	22.1:r1-s2
juniper	junos_os_evolved	22.1:r2
juniper	junos_os_evolved	22.1:r2-s1
juniper	junos_os_evolved	22.1:r3
juniper	junos_os_evolved	22.1:r3-s1
juniper	junos_os_evolved	22.1:r3-s2
juniper	junos_os_evolved	22.1:r3-s3
juniper	junos_os_evolved	22.2
juniper	junos_os_evolved	22.2:r1
juniper	junos_os_evolved	22.2:r1-s1
juniper	junos_os_evolved	22.2:r1-s2
juniper	junos_os_evolved	22.2:r2
juniper	junos_os_evolved	22.2:r2-s1
juniper	junos_os_evolved	22.2:r2-s2
juniper	junos_os_evolved	22.2:r3
juniper	junos_os_evolved	22.2:r3-s1
juniper	junos_os_evolved	22.2:r3-s2
juniper	junos_os_evolved	22.3
juniper	junos_os_evolved	22.3:r1
juniper	junos_os_evolved	22.3:r1-s1
juniper	junos_os_evolved	22.3:r1-s2
juniper	junos_os_evolved	22.3:r2
juniper	junos_os_evolved	22.3:r2-s1
juniper	junos_os_evolved	22.3:r2-s2
juniper	junos_os_evolved	22.3:r3
juniper	junos_os_evolved	22.4
juniper	junos_os_evolved	22.4:r1
juniper	junos_os_evolved	22.4:r1-s1
juniper	junos_os_evolved	22.4:r1-s2
juniper	junos_os_evolved	22.4:r2
juniper	junos_os_evolved	22.4:r2-s1
juniper	junos_os_evolved	22.4:r2-s2
juniper	junos_os_evolved	23.2
juniper	junos_os_evolved	23.2:r1
juniper	junos_os_evolved	23.2:r1-s1
juniper	junos_os_evolved	23.2:r1-s2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-754 - Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.

References

https://supportportal.juniper.net/JSA79180

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

https://supportportal.juniper.net/JSA79180

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L