Improper Check for Unusual or Exceptional Conditions Leads to Denial of Service (DoS) Vulnerability in Juniper Networks Junos OS

CVE-2024-39545

Summary

An improper check for unusual or exceptional conditions vulnerability exists in the IKE daemon (iked) of Junos OS, utilized by Juniper Networks in its SRX Series, MX Series with SPC3, and NFX350 products. This vulnerability permits unauthenticated, network-based attackers to exploit specific mismatching parameters during the IPsec negotiation process. Successful exploitation can lead to a crash of the iked service, resulting in a Denial of Service (DoS). This vulnerability affects all platforms running the iked service, emphasizing the critical need for users to update their systems to the latest versions to mitigate potential risks.

References