Juniper Networks Junos OS Evolved Vulnerable to NULL Pointer Dereference DoS Attack

CVE-2024-30403

Summary

A NULL Pointer Dereference vulnerability exists in the Packet Forwarding Engine (PFE) of Juniper Networks' Junos OS Evolved, which could be exploited by an unauthenticated, adjacent attacker to trigger a Denial of Service (DoS). The vulnerability arises during the MAC learning process when Layer 2 traffic is processed through a logical interface, particularly if the interface experiences flapping. This results in the Advanced Forwarding Toolkit manager (evo-aftmand-bt) encountering a core dump, followed by a restart of the PFE. If the same triggering events occur repetitively, they can lead to a sustained DoS condition that affects the performance and availability of the affected systems.

References