Juniper Junos OS up to 22.4R2-S1 on QFX5000/EX Packet Forwarding Engine denial of service

Summaryinfo

A vulnerability described as critical has been identified in Juniper Junos OS up to 22.4R2-S1 on QFX5000/EX. This vulnerability affects unknown code of the component Packet Forwarding Engine. The manipulation results in denial of service. This vulnerability was named CVE-2024-30388. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Juniper Junos OS up to 22.4R2-S1 on QFX5000/EX. It has been classified as critical. Affected is an unknown code block of the component Packet Forwarding Engine. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. CVE summarizes:

An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). If a specific malformed LACP packet is received by a QFX5000 Series, or an EX4400, EX4100 or EX4650 Series device, an LACP flap will occur resulting in traffic loss. This issue affects Junos OS on QFX5000 Series, and on EX4400, EX4100 or EX4650 Series: * 20.4 versions from 20.4R3-S4 before 20.4R3-S8, * 21.2 versions from 21.2R3-S2 before 21.2R3-S6, * 21.4 versions from 21.4R2 before 21.4R3-S4, * 22.1 versions from 22.1R2 before 22.1R3-S3, * 22.2 versions before 22.2R3-S1, * 22.3 versions before 22.3R2-S2, 22.3R3, * 22.4 versions before 22.4R2-S1, 22.4R3.

The advisory is available at supportportal.juniper.net. This vulnerability is traded as CVE-2024-30388 since 03/26/2024. The exploitability is told to be easy. Access to the local network is required for this attack. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available.

Upgrading to version 20.4R3-S8, 21.2R3-S6, 21.4R3-S4, 22.1R3-S3, 22.2R3-S1, 22.3R2-S2, 22.3R3, 22.4R2-S1 or 22.4R3 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS

Version

• 20.4R3-S7
• 21.2R3-S5
• 21.4R3-S3
• 22.1R3-S2
• 22.2R3-S0
• 22.3R2
• 22.3R2-S2
• 22.4R2
• 22.4R2-S1

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion