Improper Check for Unusual or Exceptional Conditions in Junos OS Leads to Denial-of-Service Attack

CVE-2024-39530

Summary

An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the chassis management daemon (chassisd) of Juniper Networks Junos OS. This vulnerability allows an unauthenticated attacker to exploit specific sensors on platforms lacking support. When attempted via GRPC or netconf, the chassisd process will crash and subsequently restart, which can delay system functionality and disrupt access to other components. As a result, this can lead to a Denial-of-Service condition affecting all FPCs, resulting in a complete outage. Only Junos OS versions from 21.4 onward are impacted, making it crucial for users to monitor and manage their upgrade paths accordingly.

References