Riskcovery

CVE-2024-39513

Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager

State
Published
Severity
6.8 Medium
Published
Jul 10, 2024
Updated
Aug 2, 2024
Reserved
Jun 25, 2024

Read the record on cve.org

Description

An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service (DoS).

When a specific "clear" command is run, the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) crashes and restarts.

The crash impacts all traffic going through the FPCs, causing a DoS. Running the command repeatedly leads to a sustained DoS condition. This issue affects Junos OS Evolved:

* All versions before 20.4R3-S9-EVO,  * from 21.2-EVO before 21.2R3-S7-EVO,  * from 21.3-EVO before 21.3R3-S5-EVO,  * from 21.4-EVO before 21.4R3-S6-EVO,  * from 22.1-EVO before 22.1R3-S4-EVO,  * from 22.2-EVO before 22.2R3-S3-EVO,  * from 22.3-EVO before 22.3R3-S3-EVO,  * from 22.4-EVO before 22.4R3-EVO, * from 23.2-EVO before 23.2R2-EVO.

Scores

CVSSScoreVectorSource
4.06.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/R:Ajuniper
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
Junos OS EvolvedJuniper Networks
  • before 20.4R3-S9-EVOAffected
  • 21.2-EVO to before 21.2R3-S7-EVOAffected
  • 21.3-EVO to before 21.3R3-S5-EVOAffected
  • 21.4-EVO to before 21.4R3-S6-EVOAffected
  • 22.1-EVO to before 22.1R3-S4-EVOAffected
  • 22.2-EVO to before 22.2R3-S3-EVOAffected
  • 22.3-EVO to before 22.3R3-S3-EVOAffected
  • 22.4-EVO to before 22.4R3-EVOAffected
  • 23.2-EVO to before 23.2R2-EVOAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.