Lucene search

[email protected]NVD:CVE-2024-39529

HistoryJul 11, 2024 - 4:15 p.m.

CVE-2024-39529

2024-07-1116:15:04

CWE-134

[email protected]

web.nvd.nist.gov

juniper networks

junos os

vulnerability

denial of service

packet forwarding engine

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.3%

JSON

A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

If DNS Domain Generation Algorithm (DGA) detection or tunnel detection, and DNS-filtering traceoptions are configured, and specific valid transit DNS traffic is received this causes a PFE crash and restart, leading to a Denial of Service.

This issue affects Junos OS:

All versions before 21.4R3-S6,
22.2 versions before 22.2R3-S3,
22.3 versions before 22.3R3-S3,
22.4 versions before 22.4R3,
23.2 versions before 23.2R2.

Affected configurations

Nvd

Node

juniperjunosRange<21.4

juniperjunosMatch21.4-

juniperjunosMatch21.4r1

juniperjunosMatch21.4r1-s1

juniperjunosMatch21.4r1-s2

juniperjunosMatch21.4r2

juniperjunosMatch21.4r2-s1

juniperjunosMatch21.4r2-s2

juniperjunosMatch21.4r3

juniperjunosMatch21.4r3-s1

juniperjunosMatch21.4r3-s2

juniperjunosMatch21.4r3-s3

juniperjunosMatch21.4r3-s4

juniperjunosMatch21.4r3-s5

juniperjunosMatch22.2-

juniperjunosMatch22.2r1

juniperjunosMatch22.2r1-s1

juniperjunosMatch22.2r1-s2

juniperjunosMatch22.2r2

juniperjunosMatch22.2r2-s1

juniperjunosMatch22.2r2-s2

juniperjunosMatch22.2r3

juniperjunosMatch22.2r3-s1

juniperjunosMatch22.2r3-s2

juniperjunosMatch22.3-

juniperjunosMatch22.3r1

juniperjunosMatch22.3r1-s1

juniperjunosMatch22.3r1-s2

juniperjunosMatch22.3r2

juniperjunosMatch22.3r2-s1

juniperjunosMatch22.3r2-s2

juniperjunosMatch22.3r3

juniperjunosMatch22.3r3-s1

juniperjunosMatch22.3r3-s2

juniperjunosMatch22.4-

juniperjunosMatch22.4r1

juniperjunosMatch22.4r1-s1

juniperjunosMatch22.4r1-s2

juniperjunosMatch22.4r2

juniperjunosMatch22.4r2-s1

juniperjunosMatch22.4r2-s2

juniperjunosMatch23.2-

juniperjunosMatch23.2r1

juniperjunosMatch23.2r1-s1

juniperjunosMatch23.2r1-s2

AND

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx1500Match-

junipersrx1600Match-

junipersrx210Match-

junipersrx220Match-

junipersrx2300Match-

junipersrx240Match-

junipersrx240h2Match-

junipersrx240mMatch-

junipersrx300Match-

junipersrx320Match-

junipersrx340Match-

junipersrx3400Match-

junipersrx345Match-

junipersrx3600Match-

junipersrx380Match-

junipersrx4000Match-

junipersrx4100Match-

junipersrx4200Match-

junipersrx4300Match-

junipersrx4600Match-

junipersrx4700Match-

junipersrx5000Match-

junipersrx5400Match-

junipersrx550Match-

junipersrx550_hmMatch-

junipersrx550mMatch-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

VendorProductVersionCPE
juniperjunos*cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
juniperjunos21.4cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	junos	*	cpe:2.3:o:juniper:junos::::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:-::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r1::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r1-s1::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r1-s2::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r2::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r2-s1::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r2-s2::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r3::::::
juniper	junos	21.4	cpe:2.3:o:juniper:junos:21.4:r3-s1::::::

Rows per page:

1-10 of 771

References

supportportal.juniper.net/JSA82988

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.3%

JSON

Related for NVD:CVE-2024-39529

cve1 nessus1 cvelist1 vulnrichment1