{"An Improper Handling of Values vulnerability in Junos OS Evolved ALLOWS a Denial-of-Service (DoS)."}

CVE-2024-39531

Summary

An Improper Handling of Values vulnerability exists in the Packet Forwarding Engine (PFE) of Junos OS Evolved on the Juniper ACX 7000 Series. This flaw enables a network-based, unauthenticated attacker to execute a Denial-of-Service (DoS) attack. When a value is set for DDoS bandwidth or burst parameters for specific protocols in a shared queue, all protocols using that queue inherit the modified bandwidth or burst settings. As a result, this can lead to unintentional exposure of the control plane to high traffic volumes or impose restrictive limits on certain protocols, thereby increasing the risk of successful volumetric DoS attacks.

References