Improper Handling of Exceptional Conditions Leads to Denial of Service Vulnerability in Juniper Networks

CVE-2024-39547

Summary

A vulnerability exists within the rpd-server of Juniper Networks' Junos OS and Junos OS Evolved that allows unauthenticated network-based attackers to exploit improper handling of exceptional conditions. By sending carefully crafted TCP traffic to the routing engine, these attackers can induce high CPU utilization at the control plane, resulting in a Denial of Service. This vulnerability becomes particularly severe when RIB sharding is enabled, leading to unexpected task accounting reads by the RPD Server jobs. Affected systems include various versions of Junos OS and Junos OS Evolved, with both requiring urgent attention for system management and security protocols.

References