CVE-2024-39519
Reported by juniper · Published July 11, 2024
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). On all ACX 7000 Series platforms running Junos OS Evolved, and configured with IRBs, if a Customer Edge device (CE) device is dual homed to two Provider Edge devices (PE) a traffic loop will occur when the CE sends multicast packets. This issue can be triggered by IPv4 and IPv6 traffic. This issue affects Junos OS Evolved: All versions from 22.2R1-EVO and later versions before 22.4R2-EVO, This issue does not affect Junos OS Evolved versions before 22.1R1-EVO.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Junos OS Evolved | Juniper Networks | 22.4R2-EVO, 22.1R1-EVO |
| junos_os_evolved | juniper | 22.4 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS Evolved | 22.1-EVO, 0, 22.2-EVO |
| Juniper Networks | Junos OS Evolved | 22.1-EVO, 22.2-EVO, 22.3-EVO |
Timeline
- Jul 10, 2024 CVE Published
- Jul 12, 2024 EPSS Score (30 in total, the first dated here)
- Oct 4, 2024 Coalition ESS Score (11 in total, the first dated here)
- Jun 2, 2026 Security Advisory
- Jun 17, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-39519
vulnetix vdb fixes CVE-2024-39519Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-39519/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart