Uncontrolled Resource Consumption Vulnerability Affects Juniper Networks' Junos OS Evolved
CVE-2024-39548
Summary
An Uncontrolled Resource Consumption vulnerability exists within the aftmand process of Junos OS Evolved from Juniper Networks, allowing unauthorized network-based attackers to deplete system memory resources. This exploitation leads to a Denial of Service condition where affected processes fail to recover automatically, necessitating manual intervention for system restoration. The vulnerability is present in configurations using both IPv4 and IPv6 protocols, amplifying its impact on networked systems. Administrators can monitor memory usage to identify potential exploitation via specific commands. Immediate attention is required for all versions prior to the identified safe versions.
Affected Version(s)
Junos OS Evolved 0 < 21.2R3-S8-EVO
Junos OS Evolved 21.3 < 21.3R3-S5-EVO
Junos OS Evolved 21.4 < 21.4R3-S5-EVO
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved