Juniper Networks Junos OS Evolved prior 23.4R2-EVO on ACX7000 Packet Forwarding Engine values

Summaryinfo

A vulnerability, which was classified as critical, was found in Juniper Networks Junos OS Evolved on ACX7000. The impacted element is an unknown function of the component Packet Forwarding Engine. Executing a manipulation can lead to improper handling of values. This vulnerability appears as CVE-2024-39531. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Juniper Networks Junos OS Evolved on ACX7000. It has been declared as critical. This vulnerability affects some unknown functionality of the component Packet Forwarding Engine. The manipulation with an unknown input leads to a improper handling of values vulnerability. The CWE definition for the vulnerability is CWE-229. The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined. As an impact it is known to affect availability. CVE summarizes:

An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). If a value is configured for DDoS bandwidth or burst parameters for any protocol in a queue, all protocols which share the same queue will have their bandwidth or burst value changed to the new value. If, for example, OSPF was configured with a certain bandwidth value, ISIS would also be limited to this value. So inadvertently either the control plane is open for a high level of specific traffic which was supposed to be limited to a lower value, or the limit for a certain protocol is so low that chances to succeed with a volumetric DoS attack are significantly increased.  This issue affects Junos OS Evolved on ACX 7000 Series: * All versions before 21.4R3-S7-EVO, * 22.1 versions before 22.1R3-S6-EVO,  * 22.2 versions before 22.2R3-S3-EVO, * 22.3 versions before 22.3R3-S3-EVO,  * 22.4 versions before 22.4R3-S2-EVO, * 23.2 versions before 23.2R2-EVO, * 23.4 versions before 23.4R1-S1-EVO, 23.4R2-EVO.

The advisory is shared for download at supportportal.juniper.net. This vulnerability was named CVE-2024-39531 since 06/25/2024. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

Upgrading to version 21.4R3-S7-EVO, 22.1R3-S6-EVO, 22.2R3-S3-EVO, 22.3R3-S3-EVO, 22.4R3-S2-EVO, 23.2R2-EVO, 23.4R1-S1-EVO or 23.4R2-EVO eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• Juniper Networks

Name

• Junos OS Evolved

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion