Improper Handling of Exceptional Conditions in Junos OS and Junos OS Evolved Leads to Denial of Service (DoS)

CVE-2024-39555

What is CVE-2024-39555?

A vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks' Junos OS and Junos OS Evolved manifests as an improper handling of exceptional conditions. Affected systems permit attackers, who have an established BGP session, to send specifically malformed BGP update messages that induce resets of the session. The issue particularly arises when segment routing is enabled, leading to improper parsing of tunnel encapsulation attributes. This can escalate to a sustained Denial of Service (DoS) condition as continued receipt of malformed messages disrupts normal operations of the network, affecting both eBGP and iBGP across IPv4 and IPv6 implementations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References