CVE-2024-30403
CVSS V2 None
CVSS V3 None
Description
A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).
When Layer 2 traffic is sent through a logical interface, MAC learning happens. If during this process, the interface flaps, an Advanced Forwarding Toolkit manager (evo-aftmand-bt) core is observed. This leads to a PFE restart. The crash reoccurs if the same sequence of events happens, which will lead to a sustained DoS condition.
This issue affects Juniper Networks Junos OS Evolved 23.2-EVO versions earlier than 23.2R1-S1-EVO, 23.2R2-EVO.
Overview
- CVE ID
- CVE-2024-30403
- Assigner
- juniper
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-04-12T15:28:10.459Z
- Last Modified Date
- 2024-06-04T17:39:39.894Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://supportportal.juniper.net/JSA79181 | vendor-advisory |
| https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L | technical-description |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-30403 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30403 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 11:26:39 | Added to TrackCVE |