Lucene search

JuniperVULNRICHMENT:CVE-2024-30388

HistoryApr 12, 2024 - 3:09 p.m.

CVE-2024-30388 Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps

2024-04-1215:09:12

CWE-653

juniper

github.com

junos os

improper isolation

qfx5000 series

ex series

lacp packets

denial of service

dos

20.4 versions

21.2 versions

21.4 versions

22.1 versions

22.2 versions

22.3 versions

22.4 versions

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS4

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:L

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

If a specific malformed LACP packet is received by a QFX5000 Series, or an EX4400, EX4100 or EX4650 Series device, an LACP flap will occur resulting in traffic loss.
This issue affects Junos OS on QFX5000 Series, and on EX4400, EX4100 or EX4650 Series:

20.4 versions from

20.4R3-S4

before 20.4R3-S8,

21.2 versions from

21.2R3-S2

before 21.2R3-S6,

21.4 versions from

21.4R2

before 21.4R3-S4,

22.1 versions from

22.1R2

before 22.1R3-S3,

22.2 versions before 22.2R3-S1,
22.3 versions before 22.3R2-S2, 22.3R3,
22.4 versions before 22.4R2-S1, 22.4R3.

CNA Affected

[
  {
    "vendor": "Juniper Networks",
    "product": "Junos OS",
    "versions": [
      {
        "status": "affected",
        "version": "20.4R3-S4",
        "lessThan": "20.4R3-S8",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "21.2R3-S2",
        "lessThan": "21.2R3-S6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "21.4R2",
        "lessThan": "21.4R3-S4",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.1R2",
        "lessThan": "22.1R3-S3",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.2",
        "lessThan": "22.2R3-S1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.3",
        "lessThan": "22.3R2-S2, 22.3R3",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "22.4",
        "lessThan": "22.4R2-S1, 22.4R3",
        "versionType": "semver"
      }
    ],
    "platforms": [
      "QFX5000 Series",
      "EX Series"
    ],
    "defaultStatus": "unaffected"
  }
]

References

supportportal.juniper.net/JSA79089

www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS4

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:L

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-30388