Juniper Networks Junos OS up to 23.4R1 on MX memory leak

Summaryinfo

A vulnerability described as problematic has been identified in Juniper Networks Junos OS up to 23.4R1 on MX. The affected element is an unknown function. Such manipulation leads to memory leak. This vulnerability is listed as CVE-2024-39550. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Juniper Networks Junos OS up to 23.4R1 on MX. It has been rated as critical. Affected by this issue is an unknown code block. The manipulation with an unknown input leads to a memory leak vulnerability. Using CWE to declare the problem leads to CWE-401. The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory. Impacted is availability. CVE summarizes:

A Missing Release of Memory after Effective Lifetime vulnerability in the rtlogd process of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, adjacent attacker to trigger internal events cause ( which can be done by repeated port flaps) to cause a slow memory leak, ultimately leading to a Denial of Service (DoS). Memory can only be recovered by manually restarting rtlogd process.  The memory usage can be monitored using the below command.     user@host> show system processes extensive | match rtlog  This issue affects Junos OS on MX Series with SPC3 line card:  * from 21.2R3 before 21.2R3-S8,  * from 21.4R2 before 21.4R3-S6,  * from 22.1 before 22.1R3-S5,  * from 22.2 before 22.2R3-S3,  * from 22.3 before 22.3R3-S2,  * from 22.4 before 22.4R3-S1,  * from 23.2 before 23.2R2,  * from 23.4 before 23.4R2.

The advisory is available at supportportal.juniper.net. This vulnerability is handled as CVE-2024-39550 since 06/25/2024. The exploitation is known to be easy. Access to the local network is required for this attack. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available.

Upgrading to version 21.2R3-S8, 21.4R3-S6, 22.1R3-S5, 22.2R3-S3, 22.3R3-S2, 22.4R3-S1, 23.2R2 or 23.4R2 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Juniper Networks

Name

• Junos OS

Version

• 21.2R3-S7
• 21.4R3-S5
• 22.1R3-S4
• 22.2R3-S2
• 22.3R3-S1
• 22.4R3-S0
• 23.2R1
• 23.4R1

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion