Lucene search

[email protected]NVD:CVE-2024-21612

HistoryJan 12, 2024 - 1:15 a.m.

CVE-2024-21612

2024-01-1201:15:49

CWE-228

[email protected]

web.nvd.nist.gov

juniper networks junos os evolved

denial of service

object flooding protocol

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

On all Junos OS Evolved platforms, when specific TCP packets are received on an open OFP port, the OFP crashes leading to a restart of Routine Engine (RE). Continuous receipt of these specific TCP packets will lead to a sustained Denial of Service (DoS) condition.

This issue affects:

Juniper Networks Junos OS Evolved

All versions earlier than 21.2R3-S7-EVO;
21.3 versions earlier than 21.3R3-S5-EVO ;
21.4 versions earlier than 21.4R3-S5-EVO;
22.1 versions earlier than 22.1R3-S4-EVO;
22.2 versions earlier than 22.2R3-S3-EVO ;
22.3 versions earlier than 22.3R3-EVO;
22.4 versions earlier than 22.4R2-EVO, 22.4R3-EVO.

Affected configurations

Nvd

Node

juniperjunos_os_evolvedRange<21.2

juniperjunos_os_evolvedMatch21.2-

juniperjunos_os_evolvedMatch21.2r1

juniperjunos_os_evolvedMatch21.2r1-s1

juniperjunos_os_evolvedMatch21.2r1-s2

juniperjunos_os_evolvedMatch21.2r2

juniperjunos_os_evolvedMatch21.2r2-s1

juniperjunos_os_evolvedMatch21.2r2-s2

juniperjunos_os_evolvedMatch21.2r3

juniperjunos_os_evolvedMatch21.2r3-s1

juniperjunos_os_evolvedMatch21.2r3-s2

juniperjunos_os_evolvedMatch21.2r3-s3

juniperjunos_os_evolvedMatch21.2r3-s4

juniperjunos_os_evolvedMatch21.2r3-s5

juniperjunos_os_evolvedMatch21.2r3-s6

juniperjunos_os_evolvedMatch21.3-

juniperjunos_os_evolvedMatch21.3r1

juniperjunos_os_evolvedMatch21.3r1-s1

juniperjunos_os_evolvedMatch21.3r2

juniperjunos_os_evolvedMatch21.3r2-s1

juniperjunos_os_evolvedMatch21.3r2-s2

juniperjunos_os_evolvedMatch21.3r3

juniperjunos_os_evolvedMatch21.3r3-s1

juniperjunos_os_evolvedMatch21.3r3-s2

juniperjunos_os_evolvedMatch21.3r3-s3

juniperjunos_os_evolvedMatch21.3r3-s4

juniperjunos_os_evolvedMatch21.4-

juniperjunos_os_evolvedMatch21.4r1

juniperjunos_os_evolvedMatch21.4r1-s1

juniperjunos_os_evolvedMatch21.4r1-s2

juniperjunos_os_evolvedMatch21.4r2

juniperjunos_os_evolvedMatch21.4r2-s1

juniperjunos_os_evolvedMatch21.4r2-s2

juniperjunos_os_evolvedMatch21.4r3

juniperjunos_os_evolvedMatch21.4r3-s1

juniperjunos_os_evolvedMatch21.4r3-s2

juniperjunos_os_evolvedMatch21.4r3-s3

juniperjunos_os_evolvedMatch21.4r3-s4

juniperjunos_os_evolvedMatch22.1-

juniperjunos_os_evolvedMatch22.1r1

juniperjunos_os_evolvedMatch22.1r1-s1

juniperjunos_os_evolvedMatch22.1r1-s2

juniperjunos_os_evolvedMatch22.1r2

juniperjunos_os_evolvedMatch22.1r2-s1

juniperjunos_os_evolvedMatch22.1r3

juniperjunos_os_evolvedMatch22.1r3-s1

juniperjunos_os_evolvedMatch22.1r3-s2

juniperjunos_os_evolvedMatch22.1r3-s3

juniperjunos_os_evolvedMatch22.2-

juniperjunos_os_evolvedMatch22.2r1

juniperjunos_os_evolvedMatch22.2r1-s1

juniperjunos_os_evolvedMatch22.2r2

juniperjunos_os_evolvedMatch22.2r2-s1

juniperjunos_os_evolvedMatch22.2r2-s2

juniperjunos_os_evolvedMatch22.2r3

juniperjunos_os_evolvedMatch22.2r3-s1

juniperjunos_os_evolvedMatch22.2r3-s2

juniperjunos_os_evolvedMatch22.3-

juniperjunos_os_evolvedMatch22.3r1

juniperjunos_os_evolvedMatch22.3r1-s1

juniperjunos_os_evolvedMatch22.3r1-s2

juniperjunos_os_evolvedMatch22.3r2

juniperjunos_os_evolvedMatch22.3r2-s1

juniperjunos_os_evolvedMatch22.3r2-s2

juniperjunos_os_evolvedMatch22.4-

juniperjunos_os_evolvedMatch22.4r1

juniperjunos_os_evolvedMatch22.4r1-s1

juniperjunos_os_evolvedMatch22.4r1-s2

VendorProductVersionCPE
juniperjunos_os_evolved*cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*
juniperjunos_os_evolved21.2cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	junos_os_evolved	*	cpe:2.3:o:juniper:junos_os_evolved::::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:-::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r1::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r2::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r3::::::
juniper	junos_os_evolved	21.2	cpe:2.3:o:juniper:junos_os_evolved:21.2:r3-s1::::::

Rows per page:

1-10 of 681

References

supportportal.juniper.net/JSA75753

www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

Related for NVD:CVE-2024-21612

cvelist1 cve1 prion1