CVE-2024-39531 Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols

An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. If a value is configured for DDoS bandwidth or burst parameters for any...

CVE-2024-39531

The CVE-2024-39531 entry affects Junos OS Evolved on ACX 7000 Series. The vulnerability lies in the Packet Forwarding Engine (PFE) where configuring DDoS bandwidth or burst parameters for any protocol in a queue causes all protocols sharing that queue to adopt the new value. This can inadvertentl...

CVE-2024-39529

CVE-2024-39529 describes a Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Junos OS on SRX Series, allowing an unauthenticated, network-based attacker to cause a DoS. Affected Junos OS versions include: prior to 21.4R3-S6; 22.2 before 22.2R3-S3; 2...

CVE-2024-39519 Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. On all ACX 7000 Series platforms running Junos OS Evolved...

CVE-2024-39519

CVE-2024-39519 describes an improper check in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on the ACX7000 Series. An unauthenticated, adjacent attacker can cause a DoS by triggering a multicast traffic loop when a CE is dual-homed to two PEs in an EVPN MPLS setup, via I...

Juniper Networks Junos OS SRX Security Vulnerability

Juniper Networks Junos OS SRX is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS SRX that originates from a use...

CVE-2024-39540: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When an affected device receives specif...

CVE-2024-39542: Improper Validation of Syntactic Correctness of Input

An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600, MX304, and Junos OS Evolved on ACX Series and PTX Series allows an unauthenticated, network based attacker to cause a...

CVE-2024-39519: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. On all ACX 7000 Series platforms running Junos OS Evolved...

CVE-2024-39529: Use of Externally-Controlled Format String

A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If DNS Domain Generation Algorithm DGA detection or tunnel detection, and...

CVE-2024-39531: Improper Handling of Values

An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. If a value is configured for DDoS bandwidth or burst parameters for any...

CVE-2024-39535: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. When a device has a Layer 3 or an IRB interface configur...

CVE-2024-39513

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service DoS. When a specific "clear" command is run, the Advanced Forwarding Toolkit manager evo-aftmand-bt or...

CVE-2024-39513

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service DoS. When a specific "clear" command is run, the Advanced Forwarding Toolkit manager evo-aftmand-bt or...

CVE-2024-39513 Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service DoS. When a specific "clear" command is run, the Advanced Forwarding Toolkit manager evo-aftmand-bt or...

CVE-2024-39513

CVE-2024-39513 maps to a local, low-privilege DoS in Juniper Networks Junos OS Evolved due to an Improper Input Validation in the Packet Forwarding Engine (PFE). The vulnerability is triggered by a specific CLI command; when executed, the Advanced Forwarding Toolkit (evo-aftmand-bt/zx) crashes an...

Juniper Junos OS Vulnerability (JSA82978)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82978 advisory. - An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Deni...

Juniper Junos OS Vulnerability (JSA83000)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83000 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on SRX Series, and MX Series with SP...

CVE-2024-39513: Improper Input Validation

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service DoS. When a specific "clear" command is run, the Advanced Forwarding Toolkit manager evo-aftmand-bt or...

PT-2024-28516 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S9-EVO Junos OS Evolved versions from 21.2-EVO before 21.2R3-S7-EVO Junos OS Evolved versions from 21.3-EVO before 21.3R3-S5-EVO Junos OS Evolved versions from 21.4-EVO before 21.4R3-S6-EVO Junos OS...