← Back

CVE-2024-21586

nvd nist
Published: Jul 1, 2024Modified: Jan 22, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: sirt@juniper.net (Secondary)

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series and NFX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an affected device receives specific valid traffic destined to the device, it will cause the PFE to crash and restart. Continued receipt and processing of this traffic will create a sustained DoS condition. This issue affects Junos OS on SRX Series: * 21.4 versions before 21.4R3-S7.9, * 22.1 versions before 22.1R3-S5.3, * 22.2 versions before 22.2R3-S4.11, * 22.3 versions before 22.3R3, * 22.4 versions before 22.4R3. This issue affects Junos OS on NFX Series: * 21.4 versions before 21.4R3-S8, * 22.1 versions after 22.1R1, * 22.2 versions before 22.2R3-S5, * 22.3 versions before 22.3R3, * 22.4 versions before 22.4R3. Junos OS versions prior to 21.4R1 are not affected by this issue.

Affected (54)

Products: Juniper: Junos
1 product
Junos
Configuration A
2 vulnerable · 17 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 22.1
Version 22.1 r1
Running on/withPlatform Versions
Juniper
Srx1500
All versions
Juniper
Srx1600
All versions
Juniper
Srx2300
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx345
All versions
Juniper
Srx380
All versions
Juniper
Srx4100
All versions
Juniper
Srx4120
All versions
Juniper
Srx4200
All versions
Juniper
Srx4300
All versions
Juniper
Srx4600
All versions
Juniper
Srx4700
All versions
Juniper
Srx5400
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions
Configuration B
52 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 21.4
Version 21.4 r1-s1
Version 21.4 r1-s2
Version 21.4 r1
Version 21.4 r2-s1
Version 21.4 r2-s2
Version 21.4 r2
Version 21.4 r3-s1
Version 21.4 r3-s2
Version 21.4 r3-s3
Version 21.4 r3-s4
Version 21.4 r3-s5
Version 21.4 r3-s6
Version 21.4 r3-s7
Version 21.4 r3
Version 22.1 r1-s1
Version 22.1 r1-s2
Version 22.1 r2-s1
Version 22.1 r2-s2
Version 22.1 r2
Version 22.1 r3-s1
Version 22.1 r3-s2
Version 22.1 r3-s3
Version 22.1 r3-s4
Version 22.1 r3-s5
Version 22.1 r3
Version 22.2
Version 22.2 r1-s1
Version 22.2 r1-s2
Version 22.2 r1
Version 22.2 r2-s1
Version 22.2 r2-s2
Version 22.2 r2
Version 22.2 r3-s1
Version 22.2 r3-s2
Version 22.2 r3-s3
Version 22.2 r3-s4
Version 22.2 r3
Version 22.3
Version 22.3 r1-s1
Version 22.3 r1-s2
Version 22.3 r1
Version 22.3 r2-s1
Version 22.3 r2-s2
Version 22.3 r2
Version 22.4
Version 22.4 r1-s1
Version 22.4 r1-s2
Version 22.4 r1
Version 22.4 r2-s1
Version 22.4 r2-s2
Version 22.4 r2
Running on/withPlatform Versions
Juniper
Nfx150
All versions
Juniper
Nfx250
All versions
Juniper
Nfx350
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.