Allocation of Resources Without Limits or Throttling Vulnerability

CVE-2024-47502

Summary

A vulnerability exists in the kernel of Juniper Networks Junos OS Evolved due to Allocation of Resources Without Limits or Throttling. An unauthenticated network-based attacker may exploit this flaw to initiate a Denial of Service (DoS) attack, leading to the exhaustion of resources available for new connections to the control plane. Affected TCP sessions that are not properly cleared when terminated contribute to this resource depletion over time. The issue is limited to IPv4 traffic and only impacts TCP sessions established in-band via an interface on a Flexible PIC Concentrator (FPC); it does not affect out-of-band connections made through the management Ethernet port on the routing-engine. Affected users may observe an increasing number of TCP connections through the system connections command, and recovery from the issue necessitates a manual restart of the respective Routing Engine (RE).

References