CVE-2024-39541
Reported by juniper · Published July 11, 2024
An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When conflicting information (IP or ISO addresses) about a node is added to the Traffic Engineering (TE) database and then a subsequent operation attempts to process these, rpd will crash and restart. This issue affects: Junos OS: * 22.4 versions before 22.4R3-S1, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R1-S1, 23.4R2, This issue does not affect Junos OS versions earlier than 22.4R1. Junos OS Evolved: * 22.4-EVO versions before 22.4R3-S2-EVO, * 23.2-EVO versions before 23.2R2-EVO, * 23.4-EVO versions before 23.4R1-S1-EVO, 23.4R2-EVO, This issue does not affect Junos OS Evolved versions earlier than before 22.4R1.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Junos OS | Juniper Networks | 23.4R1-S1, 23.4R2, 23.2R2, 22.4R3-S1, 22.4R1 |
| Junos OS Evolved | Juniper Networks | 23.4R1-S1-EVO, 23.4R2-EVO, 23.2R2-EVO, 22.4R3-S2-EVO, 22.4R1 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | 22.4, 23.2, 23.4 |
| Juniper Networks | Junos OS Evolved | 22.4-EVO, 23.2-EVO, 23.4-EVO |
| Juniper Networks | Junos OS | 23.2, 22.4, 23.4 |
| Juniper Networks | Junos OS Evolved | 23.2-EVO, 22.4-EVO, 0 |
Timeline
- Jul 10, 2024 CVE Published
- Jul 12, 2024 EPSS Score (30 in total, the first dated here)
- Oct 4, 2024 Coalition ESS Score (8 in total, the first dated here)
- Nov 11, 2024 CVE Updated
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-39541
vulnetix vdb fixes CVE-2024-39541Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-39541/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart