CVE-2024-30405

CVSS V2 None CVSS V3 None

Description

An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker sending specific crafted packets to cause a transit traffic Denial of Service (DoS). Continued receipt and processing of these specific packets will sustain the Denial of Service condition. This issue affects: Juniper Networks Junos OS SRX 5000 Series with SPC2 with ALGs enabled. * All versions earlier than 21.2R3-S7; * 21.4 versions earlier than 21.4R3-S6; * 22.1 versions earlier than 22.1R3-S5; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S2; * 22.4 versions earlier than 22.4R3; * 23.2 versions earlier than 23.2R2.

Overview

CVE ID
CVE-2024-30405

Assigner
juniper

Vulnerability Status
PUBLISHED

Published Version
2024-04-12T15:04:23.911Z

Last Modified Date
2024-05-16T20:37:47.854Z

Weakness Enumerations

CWE	URL
CWE-131	http://cwe.mitre.org/data/definitions/131.html

References

Reference URL	Reference Tags
https://supportportal.juniper.net/JSA79105	vendor-advisory
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L	technical-description

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-30405
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30405

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 11:43:21				Added to TrackCVE