CVE-2024-30402

CVSS V2 None CVSS V3 None
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When telemetry requests are sent to the device, and the Dynamic Rendering Daemon (drend) is suspended, the l2ald crashes and restarts due to factors outside the attackers control. Repeated occurrences of these events causes a sustained DoS condition. This issue affects: Junos OS: * All versions earlier than 20.4R3-S10; * 21.2 versions earlier than 21.2R3-S7; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S1; * 22.4 versions earlier than 22.4R3; * 23.2 versions earlier than 23.2R1-S2, 23.2R2. Junos OS Evolved: * All versions earlier than 21.4R3-S5-EVO; * 22.1-EVO versions earlier than 22.1R3-S4-EVO; * 22.2-EVO versions earlier than 22.2R3-S3-EVO; * 22.3-EVO versions earlier than 22.3R3-S1-EVO; * 22.4-EVO versions earlier than 22.4R3-EVO; * 23.2-EVO versions earlier than 23.2R2-EVO.
Overview
  • CVE ID
  • CVE-2024-30402
  • Assigner
  • juniper
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-04-12T15:27:33.140Z
  • Last Modified Date
  • 2024-05-16T20:33:01.059Z
Weakness Enumerations
CWE URL
CWE-754 http://cwe.mitre.org/data/definitions/754.html
References
Reference URL Reference Tags
https://supportportal.juniper.net/JSA79180 vendor-advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L technical-description
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-30402
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30402
History
Created Old Value New Value Data Type Notes
2024-06-26 12:05:39 Added to TrackCVE