Executive Summary

Informations
Name CVE-2024-39516 First vendor Publication 2024-10-09
Vendor Cve Last vendor Modification 2024-10-16

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

An Out-of-Bounds Read vulnerability in

the routing protocol daemon (rpd) of

Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.

This issue only affects systems configured in
either of two ways:



* systems with BGP traceoptions enabled

* systems with BGP traffic engineering
configured

This issue can affect iBGP and eBGP with

any address family

configured. The specific attribute involved is non-transitive, and will not propagate across a network.

This issue affects:

Junos OS:Â

* All versions before 21.4R3-S8,
* 22.2 before 22.2R3-S5,Â
* 22.3 before 22.3R3-S4,Â
* 22.4 before 22.4R3-S3,Â
* 23.2 before 23.2R2-S2,Â
* 23.4 before 23.4R2;Â

Junos OS Evolved:Â

* All versions before 21.4R3-S8-EVO,Â
* 22.2-EVO before 22.2R3-S5-EVO,Â
* 22.3-EVO before 22.3R3-S4-EVO,Â
* 22.4-EVO before 22.4R3-S3-EVO,Â
* 23.2-EVO before 23.2R2-S2-EVO,Â
* 23.4-EVO before 23.4R2-EVO.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39516

Sources (Detail)

https://supportportal.juniper.net/JSA88100
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topi...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
Date Informations
2024-11-25 14:11:33
  • Multiple Updates
2024-10-17 05:27:33
  • Multiple Updates
2024-10-10 17:27:27
  • Multiple Updates
2024-10-10 00:27:27
  • First insertion