Lucene search

JuniperCVE-2024-39529

HistoryJul 11, 2024 - 4:15 p.m.

CVE-2024-39529

2024-07-1116:15:04

CWE-134

juniper

web.nvd.nist.gov

juniper networks junos

srx series

externally-controlled format string

denial-of-service

dos

packet forwarding engine

pfe

vulnerability

dns traffic

cve-2024-39529

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS4

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:L

EPSS

0.001

Percentile

17.3%

JSON

A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

If DNS Domain Generation Algorithm (DGA) detection or tunnel detection, and DNS-filtering traceoptions are configured, and specific valid transit DNS traffic is received this causes a PFE crash and restart, leading to a Denial of Service.

This issue affects Junos OS:

All versions before 21.4R3-S6,
22.2 versions before 22.2R3-S3,
22.3 versions before 22.3R3-S3,
22.4 versions before 22.4R3,
23.2 versions before 23.2R2.

Affected configurations

Nvd

Node

juniperjunosRange<21.4

juniperjunosMatch21.4-

juniperjunosMatch21.4r1

juniperjunosMatch21.4r1-s1

juniperjunosMatch21.4r1-s2

juniperjunosMatch21.4r2

juniperjunosMatch21.4r2-s1

juniperjunosMatch21.4r2-s2

juniperjunosMatch21.4r3

juniperjunosMatch21.4r3-s1

juniperjunosMatch21.4r3-s2

juniperjunosMatch21.4r3-s3

juniperjunosMatch21.4r3-s4

juniperjunosMatch21.4r3-s5

juniperjunosMatch22.2-

juniperjunosMatch22.2r1

juniperjunosMatch22.2r1-s1

juniperjunosMatch22.2r1-s2

juniperjunosMatch22.2r2

juniperjunosMatch22.2r2-s1

juniperjunosMatch22.2r2-s2

juniperjunosMatch22.2r3

juniperjunosMatch22.2r3-s1

juniperjunosMatch22.2r3-s2

juniperjunosMatch22.3-

juniperjunosMatch22.3r1

juniperjunosMatch22.3r1-s1

juniperjunosMatch22.3r1-s2

juniperjunosMatch22.3r2

juniperjunosMatch22.3r2-s1

juniperjunosMatch22.3r2-s2

juniperjunosMatch22.3r3

juniperjunosMatch22.3r3-s1

juniperjunosMatch22.3r3-s2

juniperjunosMatch22.4-

juniperjunosMatch22.4r1

juniperjunosMatch22.4r1-s1

juniperjunosMatch22.4r1-s2

juniperjunosMatch22.4r2

juniperjunosMatch22.4r2-s1

juniperjunosMatch22.4r2-s2

juniperjunosMatch23.2-

juniperjunosMatch23.2r1

juniperjunosMatch23.2r1-s1

juniperjunosMatch23.2r1-s2

AND

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx1500Match-

junipersrx1600Match-

junipersrx210Match-

junipersrx220Match-

junipersrx2300Match-

junipersrx240Match-

junipersrx240h2Match-

junipersrx240mMatch-

junipersrx300Match-

junipersrx320Match-

junipersrx340Match-

junipersrx3400Match-

junipersrx345Match-

junipersrx3600Match-

junipersrx380Match-

junipersrx4000Match-

junipersrx4100Match-

junipersrx4200Match-

junipersrx4300Match-

junipersrx4600Match-

junipersrx4700Match-

junipersrx5000Match-

junipersrx5400Match-

junipersrx550Match-

junipersrx550_hmMatch-

junipersrx550mMatch-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

VendorProductVersionCPE
juniperjunos*cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	junos	*	cpe:2.3:o:juniper:junos::::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:-::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r1::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r1-s1::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r1-s2::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r2::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r2-s1::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r2-s2::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r3::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r3-s1::::::

Rows per page:

1-10 of 771

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "SRX Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "21.4R3-S6",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "22.2R3-S3",
        "status": "affected",
        "version": "22.2",
        "versionType": "semver"
      },
      {
        "lessThan": "22.3R3-S3",
        "status": "affected",
        "version": "22.3",
        "versionType": "semver"
      },
      {
        "lessThan": "22.4R3",
        "status": "affected",
        "version": "22.4",
        "versionType": "semver"
      },
      {
        "lessThan": "23.2R2",
        "status": "affected",
        "version": "23.2",
        "versionType": "semver"
      }
    ]
  }
]

References

supportportal.juniper.net/JSA82988

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS4

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:L

EPSS

0.001

Percentile

17.3%

JSON

Related for CVE-2024-39529