Denial of Service (DoS) Vulnerability in Public Key Infrastructure Daemon (pkid)

CVE-2024-30397

What is CVE-2024-30397?

A vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS permits unauthenticated networked attackers to induce a Denial of Service (DoS). When certificate verification fails, the pkid daemon consumes all CPU resources, rendering it unresponsive to subsequent verification attempts. This condition disrupts all VPN negotiations reliant on successful certificate verification, causing significant network service degradation. The issue impacts various versions of Junos OS, making timely updates and patches crucial for network security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References