Riskcovery

CVE-2024-21610

Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck

State
Published
Severity
5.3 Medium
Published
Apr 12, 2024
Updated
May 19, 2025
Reserved
Dec 27, 2023

Read the record on cve.org

Description

An Improper Handling of Exceptional Conditions vulnerability in the Class of Service daemon (cosd) of Juniper Networks Junos OS allows an authenticated, network-based attacker with low privileges to cause a limited Denial of Service (DoS).

In a scaled CoS scenario with 1000s of interfaces, when specific low privileged commands, received over NETCONF, SSH or telnet, are handled by cosd on behalf of mgd, the respective child management daemon (mgd) processes will get stuck. In case of (Netconf over) SSH this leads to stuck SSH sessions, so that when the connection-limit for SSH is reached, new sessions can't be established anymore. A similar behavior will be seen for telnet etc.

Stuck mgd processes can be monitored by executing the following command:

user@host> show system processes extensive | match mgd | match sbwait

This issue affects Juniper Networks Junos OS: * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S2; * 22.4 versions earlier than 22.4R3; * 23.2 versions earlier than 23.2R1-S2, 23.2R2.

Scores

CVSSScoreVectorSource
4.05.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:Njuniper
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Ljuniper

Weaknesses

  • CWE-755 Improper Handling of Exceptional Conditions

Affected Products

ProductVersions
Junos OSJuniper Networks
  • before 20.4R3-S9Affected
  • 21.2 to before 21.2R3-S7Affected
  • 21.3 to before 21.3R3-S5Affected
  • 21.4 to before 21.4R3-S5Affected
  • 22.1 to before 22.1R3-S4Affected
  • 22.2 to before 22.2R3-S3Affected
  • 22.3 to before 22.3R3-S2Affected
  • 22.4 to before 22.4R3Affected
  • 23.2 to before 23.2R1-S2, 23.2R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.