CVE-2024-39549

11.07.2024, 17:15

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) ofJuniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not properly freed in all circumstances, leading to a Denial of Service (DoS).

Consumed memory can be freed by manually restarting Routing Protocol Daemon (rpd).

Memory utilization could be monitored by:
user@host> show system memory or show system monitor memory status

This issue affects:

Junos OS:  *  All versions before 21.2R3-S8,
  *  from 21.4 before 21.4R3-S8,

  *  from 22.2 before 22.2R3-S4,
  *  from 22.3 before 22.3R3-S3,
  *  from 22.4 before 22.4R3-S3,
  *  from 23.2 before 23.2R2-S1,
  *  from 23.4 before 23.4R1-S2, 23.4R2.


Junos OS Evolved:
  *  All versions before 21.2R3-S8-EVO, 
  *  from 21.4 before 21.4R3-S8-EVO,
  *  from 22.2 before 22.2R3-S4-EVO, 
  *  from 22.3 before 22.3R3-S3-EVO, 
  *  from 22.4 before 22.4R3-S3-EVO,

  *  from 23.2 before 23.2R2-S1-EVO, 
  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
juniper	CNA	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 47%

Vendor	Product	Version
juniper	junos_os	𝑥 < 21.2R3-S8
juniper	junos_os	21.4R3-S8 < 𝑥 < 21.4R3-S8
juniper	junos_os	22.2R3-S4 < 𝑥 < 22.2R3-S4
juniper	junos_os	22.3R3-S3 < 𝑥 < 22.3R3-S3
juniper	junos_os	22.4R3-S3 < 𝑥 < 22.4R3-S3
juniper	junos_os	23.2R2-S1 < 𝑥 < 23.2R2-S1
juniper	junos_os	23.4R1-S2 < 𝑥 < 23.4R1-S2
juniper	junos_os	23.4R2 < 𝑥 < 23.4R2
juniper	junos_os	24.2R2 < 𝑥 < 24.2R2
juniper	junos_os_evolved	𝑥 < 21.2R3-S8-EVO
juniper	junos_os_evolved	21.4R3-S8-EVO < 𝑥 < 21.4R3-S8-EVO
juniper	junos_os_evolved	22.2R3-S4-EVO < 𝑥 < 22.2R3-S4-EVO
juniper	junos_os_evolved	22.3R3-S3-EVO < 𝑥 < 22.3R3-S3-EVO
juniper	junos_os_evolved	22.4R3-S3-EVO < 𝑥 < 22.4R3-S3-EVO
juniper	junos_os_evolved	23.2R2-S1-EVO < 𝑥 < 23.2R2-S1-EVO
juniper	junos_os_evolved	23.4R1-S2-EVO < 𝑥 < 23.4R1-S2-EVO
juniper	junos_os_evolved	23.4R2-EVO < 𝑥 < 23.4R2-EVO
juniper	junos_os_evolved	24.2R2-EVO < 𝑥 < 24.2R2-EVO
juniper	junos	𝑥 ≤ 21.1
juniper	junos	21.2
juniper	junos	21.2:r1
juniper	junos	21.2:r1-s1
juniper	junos	21.2:r1-s2
juniper	junos	21.2:r2
juniper	junos	21.2:r2-s1
juniper	junos	21.2:r2-s2
juniper	junos	21.2:r3
juniper	junos	21.2:r3-s1
juniper	junos	21.2:r3-s2
juniper	junos	21.2:r3-s3
juniper	junos	21.2:r3-s4
juniper	junos	21.2:r3-s5
juniper	junos	21.2:r3-s6
juniper	junos	21.2:r3-s7
juniper	junos	21.4
juniper	junos	21.4:r1
juniper	junos	21.4:r1-s1
juniper	junos	21.4:r1-s2
juniper	junos	21.4:r2
juniper	junos	21.4:r2-s1
juniper	junos	21.4:r2-s2
juniper	junos	21.4:r3
juniper	junos	21.4:r3-s1
juniper	junos	21.4:r3-s2
juniper	junos	21.4:r3-s3
juniper	junos	21.4:r3-s4
juniper	junos	21.4:r3-s5
juniper	junos	21.4:r3-s6
juniper	junos	21.4:r3-s7
juniper	junos	22.2
juniper	junos	22.2:r1
juniper	junos	22.2:r1-s1
juniper	junos	22.2:r1-s2
juniper	junos	22.2:r2
juniper	junos	22.2:r2-s1
juniper	junos	22.2:r2-s2
juniper	junos	22.2:r3
juniper	junos	22.2:r3-s1
juniper	junos	22.2:r3-s2
juniper	junos	22.2:r3-s3
juniper	junos	22.3
juniper	junos	22.3:r1
juniper	junos	22.3:r1-s1
juniper	junos	22.3:r1-s2
juniper	junos	22.3:r2
juniper	junos	22.3:r2-s1
juniper	junos	22.3:r2-s2
juniper	junos	22.3:r3
juniper	junos	22.3:r3-s1
juniper	junos	22.3:r3-s2
juniper	junos	22.4
juniper	junos	22.4:r1
juniper	junos	22.4:r1-s1
juniper	junos	22.4:r1-s2
juniper	junos	22.4:r2
juniper	junos	22.4:r2-s1
juniper	junos	22.4:r2-s2
juniper	junos	22.4:r3
juniper	junos	22.4:r3-s1
juniper	junos	22.4:r3-s2
juniper	junos	23.2
juniper	junos	23.2:r1
juniper	junos	23.2:r1-s1
juniper	junos	23.2:r1-s2
juniper	junos	23.2:r2
juniper	junos	23.4
juniper	junos	23.4:r1
juniper	junos	23.4:r1-s1
juniper	junos	24.2
juniper	junos	24.2:r1
juniper	junos_os_evolved	𝑥 ≤ 21.1
juniper	junos_os_evolved	21.2
juniper	junos_os_evolved	21.2:r1
juniper	junos_os_evolved	21.2:r1-s1
juniper	junos_os_evolved	21.2:r1-s2
juniper	junos_os_evolved	21.2:r2
juniper	junos_os_evolved	21.2:r2-s1
juniper	junos_os_evolved	21.2:r2-s2
juniper	junos_os_evolved	21.2:r3
juniper	junos_os_evolved	21.2:r3-s1
juniper	junos_os_evolved	21.2:r3-s2
juniper	junos_os_evolved	21.2:r3-s3
juniper	junos_os_evolved	21.2:r3-s4
juniper	junos_os_evolved	21.2:r3-s5
juniper	junos_os_evolved	21.2:r3-s6
juniper	junos_os_evolved	21.2:r3-s7
juniper	junos_os_evolved	21.4
juniper	junos_os_evolved	21.4:r1
juniper	junos_os_evolved	21.4:r1-s1
juniper	junos_os_evolved	21.4:r1-s2
juniper	junos_os_evolved	21.4:r2
juniper	junos_os_evolved	21.4:r2-s1
juniper	junos_os_evolved	21.4:r2-s2
juniper	junos_os_evolved	21.4:r3
juniper	junos_os_evolved	21.4:r3-s1
juniper	junos_os_evolved	21.4:r3-s2
juniper	junos_os_evolved	21.4:r3-s3
juniper	junos_os_evolved	21.4:r3-s4
juniper	junos_os_evolved	21.4:r3-s5
juniper	junos_os_evolved	21.4:r3-s6
juniper	junos_os_evolved	21.4:r3-s7
juniper	junos_os_evolved	22.2
juniper	junos_os_evolved	22.2:r1
juniper	junos_os_evolved	22.2:r1-s1
juniper	junos_os_evolved	22.2:r1-s2
juniper	junos_os_evolved	22.2:r2
juniper	junos_os_evolved	22.2:r2-s1
juniper	junos_os_evolved	22.2:r2-s2
juniper	junos_os_evolved	22.2:r3
juniper	junos_os_evolved	22.2:r3-s1
juniper	junos_os_evolved	22.2:r3-s2
juniper	junos_os_evolved	22.2:r3-s3
juniper	junos_os_evolved	22.3
juniper	junos_os_evolved	22.3:r1
juniper	junos_os_evolved	22.3:r1-s1
juniper	junos_os_evolved	22.3:r1-s2
juniper	junos_os_evolved	22.3:r2
juniper	junos_os_evolved	22.3:r2-s1
juniper	junos_os_evolved	22.3:r2-s2
juniper	junos_os_evolved	22.3:r3
juniper	junos_os_evolved	22.3:r3-s1
juniper	junos_os_evolved	22.3:r3-s2
juniper	junos_os_evolved	22.4
juniper	junos_os_evolved	22.4:r1
juniper	junos_os_evolved	22.4:r1-s1
juniper	junos_os_evolved	22.4:r1-s2
juniper	junos_os_evolved	22.4:r2
juniper	junos_os_evolved	22.4:r2-s1
juniper	junos_os_evolved	22.4:r2-s2
juniper	junos_os_evolved	22.4:r3
juniper	junos_os_evolved	22.4:r3-s1
juniper	junos_os_evolved	22.4:r3-s2
juniper	junos_os_evolved	23.2
juniper	junos_os_evolved	23.2:r1
juniper	junos_os_evolved	23.2:r1-s1
juniper	junos_os_evolved	23.2:r1-s2
juniper	junos_os_evolved	23.2:r2
juniper	junos_os_evolved	23.4
juniper	junos_os_evolved	23.4:r1
juniper	junos_os_evolved	23.4:r1-s1
juniper	junos_os_evolved	24.2
juniper	junos_os_evolved	24.2:r1

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-401 - Missing Release of Memory after Effective Lifetime
The software does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References

https://supportportal.juniper.net/JSA83011