Skip to content
OpenAdvisories
High NCSC-2024-0290 25 CVEs

Kwetsbaarheden verholpen in Juniper Junos OS en Junos OS Evolved

Published Jul 12, 2024 · Updated Jul 12, 2024 · nl

Vendor: Juniper Networks Product: Junos Product: Junos OS Product: Junos OS Evolved

Summary

Er zijn kwetsbaarheden gevonden en verholpen in Juniper Junos OS en Junos OS Evolved.

Details

Interpretaties
De kwetsbaarheden stellen een kwaadwillende in staat aanvallen uit te voeren die kunnen leiden tot Denial-of-Service (DoS), toegang tot gevoelige informatie, uitvoeren van code met verhoogde gebruikersrechten en omzeilen van een beveiligingsmaatregel.

Oplossingen
Juniper heeft updates uitgebracht om de kwetsbaarheden te verhelpen in JunOS en JunOS Evolved. Zie de referenties voor meer informatie.

Vulnerabilities 25

  • High 7.5
    CVE-2024-39518

    Junos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface

    A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a steady increase in memory utilization, ultimately leading to a Denial of Service (DoS). Wh…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2024-39530

    Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis management daemon (chassisd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an attempt is made to acces…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2024-39540

    Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2024-39542

    Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash

    An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600, MX304, and Junos OS Evolved on ACX Series and PTX Series allows an unauthenticated,…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2024-39545

    Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the the IKE daemon (iked) of Juniper Networks Junos OS on SRX Series, MX Series with SPC3 and NFX350 allows allows an unauthenticated, network-based attacker sending specific mismatching…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2024-39549

    Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak

    A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the ba…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2024-39551

    Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop

    An Uncontrolled Resource Consumption vulnerability in the H.323 ALG (Application Layer Gateway) of  Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC, allows an unauthenticated network-based attacker to send specific packets causi…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2024-39552

    Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash

    An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause the RPD process to crash leading to a Denial of Servi…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2024-39555

    Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset

    An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specific malformed BGP update message to cause the session to reset, resulting in …

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2024-39514

    Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash

    An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). An attacker can send spe…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2024-39517

    Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) on Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service (DoS). In an EVPN/VX…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2024-39541

    Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash

    An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When conflicting information (…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2024-39543

    Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

    A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to send specific RPKI-RTR packets resulting in a cr…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2024-39550

    Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service

    A Missing Release of Memory after Effective Lifetime vulnerability in the rtlogd process of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, adjacent attacker to trigger internal events cause ( which can be done by repeated port fla…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2024-39558

    Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR

    An Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows a logically adjacent, unauthenticated attacker sending a specific PIM packet to cause rpd to crash and resta…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2024-39560

    Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash

    An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacent downstream RSVP neighbor to cause kernel memory exhaustion, leading to a kernel cra…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.4
    CVE-2024-39556

    Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow

    A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of S…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.3
    CVE-2024-39532

    Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user

    An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to access sensitive information. When another user performs a specific operation, s…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 5.9
    CVE-2024-39554

    Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash

    A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker …

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 5.8
    CVE-2024-39533

    Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

    An Unimplemented or Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an unauthenticated, network-based attacker to cause a minor integrity impact to downstream networks.If one or more of the f…

    Juniper Networks Junos OS Network devices
  • Medium 5.8
    CVE-2024-39561

    Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an attacker to send TCP packets with SYN/FIN or SYN/RST flags, bypassing the expected blocking o…

    Juniper Networks Junos OS Network devices
  • Medium 5.7
    CVE-2024-39528

    Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash

    A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to cause a Denial of Service (DoS).On all Junos OS and Junos Evolved platforms, if a routing-…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 5.5
    CVE-2024-39511

    Junos OS: The 802.1X Authentication Daemon crashes on running a specific command

    An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to the CLI to cause a Denial of Service (DoS). On running a specific operational dot1x comm…

    Juniper Networks Junos OS Network devices
  • Medium 5.3
    CVE-2024-39536

    Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak

    A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon (ppmd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). When a BFD ses…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 5.3
    CVE-2024-39539

    Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

    A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). In a subscriber management scenario continuous subscriber logins will …

    Juniper Networks Junos OS Network devices

Revision history

  1. #0

    Initiele versie

References