cve-2024-47491
Vulnerability from cvelistv5
Published
2024-10-11 15:23
Modified
2024-10-22 19:12
Severity ?
5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
8.2 (High) - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
Summary
An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). When a BGP UPDATE with malformed path attribute is received over an established BGP session, rpd crashes and restarts. Continuous receipt of a BGP UPDATE with a specifically malformed path attribute will create a sustained Denial of Service (DoS) condition for impacted devices. While this issue affects systems running 32-bit and 64-bit systems, the probability of impact on 64-bit system is extremely low.  According to KB25803 https://supportportal.juniper.net/s/article/Junos-How-to-check-if-Junos-OS-is-64-or-32-bit-on-a-router , customers can confirm 32-bit or 64-bit system via the ' show version detail ' command:      lab@router> show version detail| match 32      JUNOS 32-bit kernel Software Suite       lab@router> show version detail| match 64      JUNOS 64-bit kernel Software Suite  This issue affects:  Juniper Networks Junos OS:  * All versions before 21.4R3-S8,  * from 22.2 before 22.2R3-S4,  * from 22.4 before 22.4R3-S3,  * from 23.2 before 23.2R2-S1,  * from 23.4 before 23.4R1-S2, 23.4R2.  Juniper Networks Junos OS Evolved:  * All versions before 21.4R3-S8-EVO, * from 22.2 before 22.2R3-S4-EVO, * from 22.4 before 22.4R3-S3-EVO, * from 23.2 before 23.2R2-S1-EVO, * from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.
References
sirt@juniper.nethttps://supportportal.juniper.net/
Impacted products
Vendor Product Version
Juniper Networks Junos OS Version: 0   ≤
Version: 22.2   ≤
Version: 22.4   ≤
Version: 23.2   ≤
Version: 23.4   ≤
Create a notification for this product.
   Juniper Networks Junos OS Evolved Version: 0   ≤
Version: 22.2   ≤
Version: 22.4   ≤
Version: 23.2   ≤
Version: 23.4   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unaffected",
                  product: "junos",
                  vendor: "juniper",
                  versions: [
                     {
                        lessThan: "21.4r3-s8",
                        status: "affected",
                        version: "0",
                        versionType: "semver",
                     },
                     {
                        lessThan: "22.2r3-s4",
                        status: "affected",
                        version: "22.2",
                        versionType: "semver",
                     },
                     {
                        lessThan: "22.4r3-s3",
                        status: "affected",
                        version: "22.4",
                        versionType: "semver",
                     },
                     {
                        lessThan: "23.2r2-s1",
                        status: "affected",
                        version: "23.2",
                        versionType: "semver",
                     },
                     {
                        lessThan: "23.4r1-s2",
                        status: "affected",
                        version: "23.4",
                        versionType: "semver",
                     },
                     {
                        lessThan: "23.4r2",
                        status: "affected",
                        version: "23.4",
                        versionType: "semver",
                     },
                  ],
               },
               {
                  cpes: [
                     "cpe:2.3:o:juniper:junos_evolved:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unaffected",
                  product: "junos_evolved",
                  vendor: "juniper",
                  versions: [
                     {
                        lessThan: "21.4r3-s8-evo",
                        status: "affected",
                        version: "0",
                        versionType: "semver",
                     },
                     {
                        lessThan: "22.2r3-s4-evo",
                        status: "affected",
                        version: "22.2",
                        versionType: "semver",
                     },
                     {
                        lessThan: "22.4r3-s3-evo",
                        status: "affected",
                        version: "22.4",
                        versionType: "semver",
                     },
                     {
                        lessThan: "23.2r2-s1-evo",
                        status: "affected",
                        version: "23.2",
                        versionType: "semver",
                     },
                     {
                        lessThan: "23.4r1-s2-evo",
                        status: "affected",
                        version: "23.4",
                        versionType: "semver",
                     },
                     {
                        lessThan: "23.4r2-evo",
                        status: "affected",
                        version: "23.4",
                        versionType: "semver",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47491",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-22T19:11:49.343466Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-22T19:12:09.407Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Junos OS",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "21.4R3-S8",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "22.2R3-S4",
                     status: "affected",
                     version: "22.2",
                     versionType: "semver",
                  },
                  {
                     lessThan: "22.4R3-S3",
                     status: "affected",
                     version: "22.4",
                     versionType: "semver",
                  },
                  {
                     lessThan: "23.2R2-S1",
                     status: "affected",
                     version: "23.2",
                     versionType: "semver",
                  },
                  {
                     lessThan: "23.4R1-S2, 23.4R2",
                     status: "affected",
                     version: "23.4",
                     versionType: "semver",
                  },
               ],
            },
            {
               defaultStatus: "unaffected",
               product: "Junos OS Evolved",
               vendor: "Juniper Networks",
               versions: [
                  {
                     lessThan: "21.4R3-S8-EVO",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "22.2R3-S4-EVO",
                     status: "affected",
                     version: "22.2",
                     versionType: "semver",
                  },
                  {
                     lessThan: "22.4R3-S3-EVO",
                     status: "affected",
                     version: "22.4",
                     versionType: "semver",
                  },
                  {
                     lessThan: "23.2R2-S1-EVO",
                     status: "affected",
                     version: "23.2",
                     versionType: "semver",
                  },
                  {
                     lessThan: "23.4R1-S2-EVO, 23.4R2-EVO",
                     status: "affected",
                     version: "23.4",
                     versionType: "semver",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "To be exposed to this issue a minimal BGP configuration like the following is required:<br><br><tt>[ protocols bgp group &lt;name&gt; neighbor ... ]</tt><br>",
                  },
               ],
               value: "To be exposed to this issue a minimal BGP configuration like the following is required:\n\n[ protocols bgp group <name> neighbor ... ]",
            },
         ],
         datePublic: "2024-10-09T16:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<span style=\"background-color: rgb(251, 251, 251);\">An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS).<br><br><span style=\"background-color: rgb(251, 251, 251);\"><span style=\"background-color: rgb(251, 251, 251);\">When a BGP UPDATE with malformed path attribute is received over an established BGP session, rpd crashes and restarts. </span><br><br>Continuous receipt of a BGP UPDATE with a specifically malformed path attribute will create a sustained Denial of Service (DoS) condition for impacted devices. While t</span></span><span style=\"background-color: rgb(251, 251, 251);\">his issue affects systems running 32-bit and 64-bit systems, the probability of impact on 64-bit system is extremely low.&nbsp;</span><span style=\"background-color: rgb(251, 251, 251);\"><span style=\"background-color: rgb(251, 251, 251);\"><p><br>According to <a target=\"_blank\" rel=\"nofollow\" href=\"https://supportportal.juniper.net/s/article/Junos-How-to-check-if-Junos-OS-is-64-or-32-bit-on-a-router\">KB25803 </a>, customers can confirm 32-bit or 64-bit system via the ' <strong><code>show version detail </code></strong>' command:<br><br></p><tt>     lab@router&gt; show version detail| match 32<br>     JUNOS 32-bit kernel Software Suite&nbsp;<br><br>     lab@router&gt; show version detail| match 64<br>     JUNOS 64-bit kernel Software Suite&nbsp;<br><br></tt></span></span><br><p>This issue affects:</p><p> Juniper Networks Junos OS:&nbsp;</p><ul><li>All versions before 21.4R3-S8,&nbsp;</li><li>from 22.2 before 22.2R3-S4,&nbsp;</li><li>from 22.4 before 22.4R3-S3,&nbsp;</li><li>from 23.2 before 23.2R2-S1,&nbsp;</li><li>from 23.4 before 23.4R1-S2, 23.4R2.</li></ul> Juniper Networks Junos OS Evolved:&nbsp;<ul><li>All versions before 21.4R3-S8-EVO, </li><li>from 22.2 before 22.2R3-S4-EVO, </li><li>from 22.4 before 22.4R3-S3-EVO,</li><li>from 23.2 before 23.2R2-S1-EVO, </li><li>from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.</li></ul>",
                  },
               ],
               value: "An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS).\n\nWhen a BGP UPDATE with malformed path attribute is received over an established BGP session, rpd crashes and restarts. \n\nContinuous receipt of a BGP UPDATE with a specifically malformed path attribute will create a sustained Denial of Service (DoS) condition for impacted devices. While this issue affects systems running 32-bit and 64-bit systems, the probability of impact on 64-bit system is extremely low. \nAccording to  KB25803  https://supportportal.juniper.net/s/article/Junos-How-to-check-if-Junos-OS-is-64-or-32-bit-on-a-router , customers can confirm 32-bit or 64-bit system via the ' show version detail ' command:\n\n\n\n     lab@router> show version detail| match 32\n     JUNOS 32-bit kernel Software Suite \n\n     lab@router> show version detail| match 64\n     JUNOS 64-bit kernel Software Suite \n\n\nThis issue affects:\n\n Juniper Networks Junos OS: \n\n  *  All versions before 21.4R3-S8, \n  *  from 22.2 before 22.2R3-S4, \n  *  from 22.4 before 22.4R3-S3, \n  *  from 23.2 before 23.2R2-S1, \n  *  from 23.4 before 23.4R1-S2, 23.4R2.\n\n\n Juniper Networks Junos OS Evolved:   *  All versions before 21.4R3-S8-EVO, \n  *  from 22.2 before 22.2R3-S4-EVO, \n  *  from 22.4 before 22.4R3-S3-EVO,\n  *  from 23.2 before 23.2R2-S1-EVO, \n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.",
            },
         ],
         exploits: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
                  },
               ],
               value: "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
            {
               cvssV4_0: {
                  Automatable: "NOT_DEFINED",
                  Recovery: "NOT_DEFINED",
                  Safety: "NOT_DEFINED",
                  attackComplexity: "HIGH",
                  attackRequirements: "NONE",
                  attackVector: "NETWORK",
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  privilegesRequired: "NONE",
                  providerUrgency: "NOT_DEFINED",
                  subAvailabilityImpact: "LOW",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  valueDensity: "NOT_DEFINED",
                  vectorString: "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
                  vulnerabilityResponseEffort: "NOT_DEFINED",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-755",
                     description: "CWE-755 Improper Handling of Exceptional Conditions",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-17T18:02:14.393Z",
            orgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
            shortName: "juniper",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://supportportal.juniper.net/",
            },
         ],
         solutions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "The following software releases have been updated to resolve this specific issue:<br><br><span style=\"background-color: rgb(255, 255, 255);\">Junos OS: 21.4R3-S8, 22.2R3-S4, 22.4R3-S3, 23.2R2-S1, 23.4R1-S2, 23.4R2, 24.2R1, and all subsequent releases.</span> <br><br>Junos OS Evolved: 21.4R3-S8-EVO, 22.2R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S1-EVO, 23.4R1-S2-EVO, 23.4R2-EVO, 24.2R1-EVO,&nbsp;and all subsequent releases.<br><br>",
                  },
               ],
               value: "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 21.4R3-S8, 22.2R3-S4, 22.4R3-S3, 23.2R2-S1, 23.4R1-S2, 23.4R2, 24.2R1, and all subsequent releases. \n\nJunos OS Evolved: 21.4R3-S8-EVO, 22.2R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S1-EVO, 23.4R1-S2-EVO, 23.4R2-EVO, 24.2R1-EVO, and all subsequent releases.",
            },
         ],
         source: {
            advisory: "JSA88116",
            defect: [
               "1797147",
            ],
            discovery: "INTERNAL",
         },
         title: "Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash",
         workarounds: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "There are no known workarounds for this issue.",
                  },
               ],
               value: "There are no known workarounds for this issue.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8cbe9d5a-a066-4c94-8978-4b15efeae968",
      assignerShortName: "juniper",
      cveId: "CVE-2024-47491",
      datePublished: "2024-10-11T15:23:08.762Z",
      dateReserved: "2024-09-25T15:26:52.608Z",
      dateUpdated: "2024-10-22T19:12:09.407Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-47491\",\"sourceIdentifier\":\"sirt@juniper.net\",\"published\":\"2024-10-11T16:15:09.060\",\"lastModified\":\"2024-10-17T18:15:07.923\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS).\\n\\nWhen a BGP UPDATE with malformed path attribute is received over an established BGP session, rpd crashes and restarts. \\n\\nContinuous receipt of a BGP UPDATE with a specifically malformed path attribute will create a sustained Denial of Service (DoS) condition for impacted devices. While this issue affects systems running 32-bit and 64-bit systems, the probability of impact on 64-bit system is extremely low. \\nAccording to  KB25803  https://supportportal.juniper.net/s/article/Junos-How-to-check-if-Junos-OS-is-64-or-32-bit-on-a-router , customers can confirm 32-bit or 64-bit system via the ' show version detail ' command:\\n\\n\\n\\n     lab@router> show version detail| match 32\\n     JUNOS 32-bit kernel Software Suite \\n\\n     lab@router> show version detail| match 64\\n     JUNOS 64-bit kernel Software Suite \\n\\n\\nThis issue affects:\\n\\n Juniper Networks Junos OS: \\n\\n  *  All versions before 21.4R3-S8, \\n  *  from 22.2 before 22.2R3-S4, \\n  *  from 22.4 before 22.4R3-S3, \\n  *  from 23.2 before 23.2R2-S1, \\n  *  from 23.4 before 23.4R1-S2, 23.4R2.\\n\\n\\n Juniper Networks Junos OS Evolved:   *  All versions before 21.4R3-S8-EVO, \\n  *  from 22.2 before 22.2R3-S4-EVO, \\n  *  from 22.4 before 22.4R3-S3-EVO,\\n  *  from 23.2 before 23.2R2-S1-EVO, \\n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de manejo inadecuado de condiciones excepcionales en el Routing Protocol Daemon (rpd) de Juniper Networks Junos OS y Junos OS Evolved permite que un atacante no autenticado basado en la red provoque una denegación de servicio (DoS). Cuando se recibe una ACTUALIZACIÓN BGP con un atributo de ruta malformado en una sesión BGP establecida, rpd se bloquea y se reinicia. La recepción continua de una ACTUALIZACIÓN BGP con un atributo de ruta específicamente malformado creará una condición de denegación de servicio (DoS) sostenida para los dispositivos afectados. Este problema afecta a: Juniper Networks Junos OS: * Todas las versiones anteriores a 21.4R3-S8, * desde 22.2 hasta 22.2R3-S4, * desde 22.4 hasta 22.4R3-S3, * desde 23.2 hasta 23.2R2-S1, * desde 23.4 hasta 23.4R1-S2, 23.4R2. Juniper Networks Junos OS Evolved: * Todas las versiones anteriores a 21.4R3-S8-EVO, * desde 22.2 hasta 22.2R3-S4-EVO, * desde 22.4 hasta 22.4R3-S3-EVO, * desde 23.2 hasta 23.2R2-S1-EVO, * desde 23.4 hasta 23.4R1-S2-EVO, 23.4R2-EVO.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnerableSystemConfidentiality\":\"NONE\",\"vulnerableSystemIntegrity\":\"NONE\",\"vulnerableSystemAvailability\":\"HIGH\",\"subsequentSystemConfidentiality\":\"NONE\",\"subsequentSystemIntegrity\":\"NONE\",\"subsequentSystemAvailability\":\"LOW\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirements\":\"NOT_DEFINED\",\"integrityRequirements\":\"NOT_DEFINED\",\"availabilityRequirements\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnerableSystemConfidentiality\":\"NOT_DEFINED\",\"modifiedVulnerableSystemIntegrity\":\"NOT_DEFINED\",\"modifiedVulnerableSystemAvailability\":\"NOT_DEFINED\",\"modifiedSubsequentSystemConfidentiality\":\"NOT_DEFINED\",\"modifiedSubsequentSystemIntegrity\":\"NOT_DEFINED\",\"modifiedSubsequentSystemAvailability\":\"NOT_DEFINED\",\"safety\":\"NOT_DEFINED\",\"automatable\":\"NOT_DEFINED\",\"recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"sirt@juniper.net\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]}],\"references\":[{\"url\":\"https://supportportal.juniper.net/\",\"source\":\"sirt@juniper.net\"}]}}",
      vulnrichment: {
         containers: "{\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"Junos OS\", \"vendor\": \"Juniper Networks\", \"versions\": [{\"lessThan\": \"21.4R3-S8\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.2R3-S4\", \"status\": \"affected\", \"version\": \"22.2\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.4R3-S3\", \"status\": \"affected\", \"version\": \"22.4\", \"versionType\": \"semver\"}, {\"lessThan\": \"23.2R2-S1\", \"status\": \"affected\", \"version\": \"23.2\", \"versionType\": \"semver\"}, {\"lessThan\": \"23.4R1-S2, 23.4R2\", \"status\": \"affected\", \"version\": \"23.4\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Junos OS Evolved\", \"vendor\": \"Juniper Networks\", \"versions\": [{\"lessThan\": \"21.4R3-S8-EVO\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.2R3-S4-EVO\", \"status\": \"affected\", \"version\": \"22.2\", \"versionType\": \"semver\"}, {\"lessThan\": \"22.4R3-S3-EVO\", \"status\": \"affected\", \"version\": \"22.4\", \"versionType\": \"semver\"}, {\"lessThan\": \"23.2R2-S1-EVO\", \"status\": \"affected\", \"version\": \"23.2\", \"versionType\": \"semver\"}, {\"lessThan\": \"23.4R1-S2-EVO, 23.4R2-EVO\", \"status\": \"affected\", \"version\": \"23.4\", \"versionType\": \"semver\"}]}], \"configurations\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"To be exposed to this issue a minimal BGP configuration like the following is required:<br><br><tt>[ protocols bgp group &lt;name&gt; neighbor ... ]</tt><br>\"}], \"value\": \"To be exposed to this issue a minimal BGP configuration like the following is required:\\n\\n[ protocols bgp group <name> neighbor ... ]\"}], \"datePublic\": \"2024-10-09T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"<span style=\\\"background-color: rgb(251, 251, 251);\\\">An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS).<br><br><span style=\\\"background-color: rgb(251, 251, 251);\\\"><span style=\\\"background-color: rgb(251, 251, 251);\\\">When a BGP UPDATE with malformed path attribute is received over an established BGP session, rpd crashes and restarts. </span><br><br>Continuous receipt of a BGP UPDATE with a specifically malformed path attribute will create a sustained Denial of Service (DoS) condition for impacted devices. While t</span></span><span style=\\\"background-color: rgb(251, 251, 251);\\\">his issue affects systems running 32-bit and 64-bit systems, the probability of impact on 64-bit system is extremely low.&nbsp;</span><span style=\\\"background-color: rgb(251, 251, 251);\\\"><span style=\\\"background-color: rgb(251, 251, 251);\\\"><p><br>According to <a target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://supportportal.juniper.net/s/article/Junos-How-to-check-if-Junos-OS-is-64-or-32-bit-on-a-router\\\">KB25803 </a>, customers can confirm 32-bit or 64-bit system via the ' <strong><code>show version detail </code></strong>' command:<br><br></p><tt>\\u2003\\u2003\\u2003\\u2003\\u2003lab@router&gt; show version detail| match 32<br>\\u2003\\u2003\\u2003\\u2003\\u2003JUNOS 32-bit kernel Software Suite&nbsp;<br><br>\\u2003\\u2003\\u2003\\u2003\\u2003lab@router&gt; show version detail| match 64<br>\\u2003\\u2003\\u2003\\u2003\\u2003JUNOS 64-bit kernel Software Suite&nbsp;<br><br></tt></span></span><br><p>This issue affects:</p><p>\\u2003Juniper Networks Junos OS:&nbsp;</p><ul><li>All versions before 21.4R3-S8,&nbsp;</li><li>from 22.2 before 22.2R3-S4,&nbsp;</li><li>from 22.4 before 22.4R3-S3,&nbsp;</li><li>from 23.2 before 23.2R2-S1,&nbsp;</li><li>from 23.4 before 23.4R1-S2, 23.4R2.</li></ul>\\u2003Juniper Networks Junos OS Evolved:&nbsp;<ul><li>All versions before 21.4R3-S8-EVO, </li><li>from 22.2 before 22.2R3-S4-EVO, </li><li>from 22.4 before 22.4R3-S3-EVO,</li><li>from 23.2 before 23.2R2-S1-EVO, </li><li>from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.</li></ul>\"}], \"value\": \"An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS).\\n\\nWhen a BGP UPDATE with malformed path attribute is received over an established BGP session, rpd crashes and restarts. \\n\\nContinuous receipt of a BGP UPDATE with a specifically malformed path attribute will create a sustained Denial of Service (DoS) condition for impacted devices. While this issue affects systems running 32-bit and 64-bit systems, the probability of impact on 64-bit system is extremely low.\\u00a0\\nAccording to  KB25803  https://supportportal.juniper.net/s/article/Junos-How-to-check-if-Junos-OS-is-64-or-32-bit-on-a-router , customers can confirm 32-bit or 64-bit system via the ' show version detail ' command:\\n\\n\\n\\n\\u2003\\u2003\\u2003\\u2003\\u2003lab@router> show version detail| match 32\\n\\u2003\\u2003\\u2003\\u2003\\u2003JUNOS 32-bit kernel Software Suite\\u00a0\\n\\n\\u2003\\u2003\\u2003\\u2003\\u2003lab@router> show version detail| match 64\\n\\u2003\\u2003\\u2003\\u2003\\u2003JUNOS 64-bit kernel Software Suite\\u00a0\\n\\n\\nThis issue affects:\\n\\n\\u2003Juniper Networks Junos OS:\\u00a0\\n\\n  *  All versions before 21.4R3-S8,\\u00a0\\n  *  from 22.2 before 22.2R3-S4,\\u00a0\\n  *  from 22.4 before 22.4R3-S3,\\u00a0\\n  *  from 23.2 before 23.2R2-S1,\\u00a0\\n  *  from 23.4 before 23.4R1-S2, 23.4R2.\\n\\n\\n\\u2003Juniper Networks Junos OS Evolved:\\u00a0  *  All versions before 21.4R3-S8-EVO, \\n  *  from 22.2 before 22.2R3-S4-EVO, \\n  *  from 22.4 before 22.4R3-S3-EVO,\\n  *  from 23.2 before 23.2R2-S1-EVO, \\n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.\"}], \"exploits\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\"}], \"value\": \"Juniper SIRT is not aware of any malicious exploitation of this vulnerability.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 5.9, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"cvssV4_0\": {\"Automatable\": \"NOT_DEFINED\", \"Recovery\": \"NOT_DEFINED\", \"Safety\": \"NOT_DEFINED\", \"attackComplexity\": \"HIGH\", \"attackRequirements\": \"NONE\", \"attackVector\": \"NETWORK\", \"baseScore\": 8.2, \"baseSeverity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"providerUrgency\": \"NOT_DEFINED\", \"subAvailabilityImpact\": \"LOW\", \"subConfidentialityImpact\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L\", \"version\": \"4.0\", \"vulnAvailabilityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-755\", \"description\": \"CWE-755 Improper Handling of Exceptional Conditions\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"orgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"shortName\": \"juniper\", \"dateUpdated\": \"2024-10-17T18:02:14.393Z\"}, \"references\": [{\"tags\": [\"vendor-advisory\"], \"url\": \"https://supportportal.juniper.net/\"}], \"solutions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"The following software releases have been updated to resolve this specific issue:<br><br><span style=\\\"background-color: rgb(255, 255, 255);\\\">Junos OS: 21.4R3-S8, 22.2R3-S4, 22.4R3-S3, 23.2R2-S1, 23.4R1-S2, 23.4R2, 24.2R1, and all subsequent releases.</span> <br><br>Junos OS Evolved: 21.4R3-S8-EVO, 22.2R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S1-EVO, 23.4R1-S2-EVO, 23.4R2-EVO, 24.2R1-EVO,&nbsp;and all subsequent releases.<br><br>\"}], \"value\": \"The following software releases have been updated to resolve this specific issue:\\n\\nJunos OS: 21.4R3-S8, 22.2R3-S4, 22.4R3-S3, 23.2R2-S1, 23.4R1-S2, 23.4R2, 24.2R1, and all subsequent releases. \\n\\nJunos OS Evolved: 21.4R3-S8-EVO, 22.2R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S1-EVO, 23.4R1-S2-EVO, 23.4R2-EVO, 24.2R1-EVO,\\u00a0and all subsequent releases.\"}], \"source\": {\"advisory\": \"JSA88116\", \"defect\": [\"1797147\"], \"discovery\": \"INTERNAL\"}, \"title\": \"Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash\", \"workarounds\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"There are no known workarounds for this issue.\"}], \"value\": \"There are no known workarounds for this issue.\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-47491\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T19:11:49.343466Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*\"], \"vendor\": \"juniper\", \"product\": \"junos\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"21.4r3-s8\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.2\", \"lessThan\": \"22.2r3-s4\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.4\", \"lessThan\": \"22.4r3-s3\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.2\", \"lessThan\": \"23.2r2-s1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.4\", \"lessThan\": \"23.4r1-s2\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.4\", \"lessThan\": \"23.4r2\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:juniper:junos_evolved:*:*:*:*:*:*:*:*\"], \"vendor\": \"juniper\", \"product\": \"junos_evolved\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"21.4r3-s8-evo\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.2\", \"lessThan\": \"22.2r3-s4-evo\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"22.4\", \"lessThan\": \"22.4r3-s3-evo\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.2\", \"lessThan\": \"23.2r2-s1-evo\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.4\", \"lessThan\": \"23.4r1-s2-evo\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"23.4\", \"lessThan\": \"23.4r2-evo\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-11T17:53:53.336Z\"}}]}",
         cveMetadata: "{\"cveId\": \"CVE-2024-47491\", \"assignerOrgId\": \"8cbe9d5a-a066-4c94-8978-4b15efeae968\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"juniper\", \"dateReserved\": \"2024-09-25T15:26:52.608Z\", \"datePublished\": \"2024-10-11T15:23:08.762Z\", \"dateUpdated\": \"2024-10-22T19:12:09.407Z\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.