Juniper Junos OS up to 22.2R1 on MX Advanced Forwarding Management out-of-bounds

Summaryinfo

A vulnerability described as critical has been identified in Juniper Junos OS up to 22.2R1 on MX. The affected element is an unknown function of the component Advanced Forwarding Management. Such manipulation leads to out-of-bounds. This vulnerability is uniquely identified as CVE-2024-30401. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Juniper Junos OS up to 22.2R1 on MX. Affected by this issue is an unknown code block of the component Advanced Forwarding Management. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is availability. CVE summarizes:

An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on MX Series with MPC10E, MPC11, MX10K-LC9600 line cards, MX304, and EX9200-15C, may allow an attacker to exploit a stack-based buffer overflow, leading to a reboot of the FPC. Through code review, it was determined that the interface definition code for aftman could read beyond a buffer boundary, leading to a stack-based buffer overflow. This issue affects Junos OS on MX Series and EX9200-15C: * from 21.2 before 21.2R3-S1, * from 21.4 before 21.4R3, * from 22.1 before 22.1R2, * from 22.2 before 22.2R2;  This issue does not affect: * versions of Junos OS prior to 20.3R1; * any version of Junos OS 20.4.

The advisory is shared for download at supportportal.juniper.net. This vulnerability is handled as CVE-2024-30401 since 03/26/2024. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

Upgrading to version 20.3R1, 20.4, 21.2R3-S1, 21.4R3, 22.1R2 or 22.2R2 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS

Version

• 20.0
• 20.1
• 20.2
• 20.3
• 20.3R0
• 21.2R3-S0
• 21.4R2
• 22.1R1
• 22.2R1

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion