Uncontrolled Resource Consumption Vulnerability Can Cause Denial-of-Service (DoS) on Juniper Networks Devices

CVE-2024-47497

Summary

An Uncontrolled Resource Consumption vulnerability exists in the http daemon (httpd) of Juniper Networks' Junos OS. This flaw allows unauthenticated, network-based attackers to exploit the system by sending specific HTTPS connection requests. This exploitation results in the creation of persistent processes that fail to terminate correctly, leading to resource depletion. Consequently, this can cause the affected devices, such as those in the SRX, QFX, MX, and EX Series, to become unresponsive and ultimately crash, requiring a restart. For impacted users, monitoring procedures can be implemented using system commands to track resource utilization.

References