CVE-2024-21612

CVSS V2 None CVSS V3 None

Description

An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On all Junos OS Evolved platforms, when specific TCP packets are received on an open OFP port, the OFP crashes leading to a restart of Routine Engine (RE). Continuous receipt of these specific TCP packets will lead to a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS Evolved * All versions earlier than 21.2R3-S7-EVO; * 21.3 versions earlier than 21.3R3-S5-EVO ; * 21.4 versions earlier than 21.4R3-S5-EVO; * 22.1 versions earlier than 22.1R3-S4-EVO; * 22.2 versions earlier than 22.2R3-S3-EVO ; * 22.3 versions earlier than 22.3R3-EVO; * 22.4 versions earlier than 22.4R2-EVO, 22.4R3-EVO.

Overview

CVE ID
CVE-2024-21612

Assigner
juniper

Vulnerability Status
PUBLISHED

Published Version
2024-01-12T00:55:37.059Z

Last Modified Date
2024-01-29T15:28:06.536Z

Weakness Enumerations

CWE	URL
CWE-228	http://cwe.mitre.org/data/definitions/228.html

References

Reference URL	Reference Tags
https://supportportal.juniper.net/JSA75753	vendor-advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	technical-description

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-21612
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21612

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 15:12:20				Added to TrackCVE