Improper Handling of Exceptional Conditions Leads to Denial of Service Vulnerability in Juniper Networks

CVE-2024-39547

What is CVE-2024-39547?

A vulnerability exists within the rpd-server of Juniper Networks' Junos OS and Junos OS Evolved that allows unauthenticated network-based attackers to exploit improper handling of exceptional conditions. By sending carefully crafted TCP traffic to the routing engine, these attackers can induce high CPU utilization at the control plane, resulting in a Denial of Service. This vulnerability becomes particularly severe when RIB sharding is enabled, leading to unexpected task accounting reads by the RPD Server jobs. Affected systems include various versions of Junos OS and Junos OS Evolved, with both requiring urgent attention for system management and security protocols.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References