CVE-2024-39540

Published: Jul 11, 2024Modified: Apr 11, 2025

8.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: sirt@juniper.net (Secondary)

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device receives specific valid TCP traffic, the pfe crashes and restarts leading to a momentary but complete service outage. This issue affects Junos OS: 21.2 releases from 21.2R3-S5 before 21.2R3-S6. This issue does not affect earlier or later releases.

Affected (1)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

1 vulnerable · 37 platform

Vulnerable Software	Affected Versions
Juniper Junos	Version 21.2 r3-s5

Running on/with	Platform Versions
Juniper Csrx	All versions
Juniper Mx240	All versions
Juniper Mx480	All versions
Juniper Mx960	All versions
Juniper Srx100	All versions
Juniper Srx110	All versions
Juniper Srx1400	All versions
Juniper Srx1500	All versions
Juniper Srx1600	All versions
Juniper Srx210	All versions
Juniper Srx220	All versions
Juniper Srx2300	All versions
Juniper Srx240	All versions
Juniper Srx240h2	All versions
Juniper Srx240m	All versions
Juniper Srx300	All versions
Juniper Srx320	All versions
Juniper Srx340	All versions
Juniper Srx3400	All versions
Juniper Srx345	All versions
Juniper Srx3600	All versions
Juniper Srx380	All versions
Juniper Srx4000	All versions
Juniper Srx4100	All versions
Juniper Srx4200	All versions
Juniper Srx4300	All versions
Juniper Srx4600	All versions
Juniper Srx4700	All versions
Juniper Srx5000	All versions
Juniper Srx5400	All versions
Juniper Srx550	All versions
Juniper Srx550 Hm	All versions
Juniper Srx550m	All versions
Juniper Srx5600	All versions
Juniper Srx5800	All versions
Juniper Srx650	All versions
Juniper Vsrx	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

https://supportportal.juniper.net/JSA83000

Source: sirt@juniper.net

Vendor Advisory

https://supportportal.juniper.net/JSA83000

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.