Denial of Service (DoS) Vulnerability in Public Key Infrastructure Daemon (pkid)

CVE-2024-30397

Summary

A vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS permits unauthenticated networked attackers to induce a Denial of Service (DoS). When certificate verification fails, the pkid daemon consumes all CPU resources, rendering it unresponsive to subsequent verification attempts. This condition disrupts all VPN negotiations reliant on successful certificate verification, causing significant network service degradation. The issue impacts various versions of Junos OS, making timely updates and patches crucial for network security.

References