CVE-2024-47496
CVSS V2 None
CVSS V3 None
Description
A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS).
When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition.
This issue only affects MX Series devices with Line cards MPC1-MPC9.
This issue affects:
Junos OS on MX Series:
* All versions before 21.4R3-S9,
* from 22.2 before 22.2R3-S5,
* from 22.3 before 22.3R3-S4,
* from 22.4 before 22.4R3-S2,
* from 23.2 before 23.2R2-S1,
* from 23.4 before 23.4R2.
Overview
- CVE ID
- CVE-2024-47496
- Assigner
- juniper
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-10-11T15:28:13.727Z
- Last Modified Date
- 2024-10-11T17:42:39.299Z
Weakness Enumerations
References
Reference URL | Reference Tags |
---|---|
https://supportportal.juniper.net/ | vendor-advisory |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-47496 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47496 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-10-12 13:29:45 | Added to TrackCVE |