Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2024-30382

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to send a specific routing update, causing an rpd core due to memory corruption, leading to a Denial of Service (DoS).

This issue can only be triggered when the system is configured for CoS-based forwarding (CBF) with a policy map containing a cos-next-hop-map action (see below). This issue affects: Junos OS:

  • all versions before 20.4R3-S10,
  • from 21.2 before 21.2R3-S8,
  • from 21.3 before 21.3R3,
  • from 21.4 before 21.4R3,
  • from 22.1 before 22.1R2;

Junos OS Evolved:

  • all versions before 21.2R3-S8-EVO,
  • from 21.3 before 21.3R3-EVO,
  • from 21.4 before 21.4R3-EVO,
  • from 22.1 before 22.1R2-EVO.
  • Published: Apr 12, 2024
  • Updated: May 17, 2024
  • CVE: CVE-2024-30382
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
juniper / junos 20.4-r1 20.4-r1.x
juniper / junos 20.4-r1-s1 20.4-r1-s1.x
juniper / junos 20.4-r2 20.4-r2.x
juniper / junos 21.2-r1 21.2-r1.x
juniper / junos 20.4-r2-s1 20.4-r2-s1.x
juniper / junos_os_evolved 21.2-r1 21.2-r1.x
juniper / junos 20.4 20.4.x
juniper / junos 20.4-r2-s2 20.4-r2-s2.x
juniper / junos 20.4-r3 20.4-r3.x
juniper / junos 20.4-r3-s1 20.4-r3-s1.x
juniper / junos 21.2 21.2.x
juniper / junos 21.2-r1-s1 21.2-r1-s1.x
juniper / junos 21.2-r2 21.2-r2.x
juniper / junos 21.3-r1 21.3-r1.x
juniper / junos 21.3-r2 21.3-r2.x
juniper / junos_os_evolved 21.2-r1-s1 21.2-r1-s1.x
juniper / junos_os_evolved 21.2-r2 21.2-r2.x
juniper / junos_os_evolved 21.3-r1 21.3-r1.x
juniper / junos 20.4-r3-s2 20.4-r3-s2.x
juniper / junos 20.4-r3-s3 20.4-r3-s3.x
juniper / junos 21.2-r1-s2 21.2-r1-s2.x
juniper / junos 21.2-r2-s1 21.2-r2-s1.x
juniper / junos 21.2-r2-s2 21.2-r2-s2.x
juniper / junos 21.2-r3 21.2-r3.x
juniper / junos 21.3-r1-s1 21.3-r1-s1.x
juniper / junos 21.3-r1-s2 21.3-r1-s2.x
juniper / junos 21.3-r2-s1 21.3-r2-s1.x
juniper / junos 21.3-r2-s2 21.3-r2-s2.x
juniper / junos 21.4-r1 21.4-r1.x
juniper / junos 21.4-r1-s1 21.4-r1-s1.x
juniper / junos 21.4-r1-s2 21.4-r1-s2.x
juniper / junos 21.4-r2 21.4-r2.x
juniper / junos 21.4-r2-s1 21.4-r2-s1.x
juniper / junos 22.1-r1 22.1-r1.x
juniper / junos_os_evolved - 21.2
juniper / junos_os_evolved 21.2 21.2.x
juniper / junos_os_evolved 21.2-r1-s2 21.2-r1-s2.x
juniper / junos_os_evolved 21.2-r2-s1 21.2-r2-s1.x
juniper / junos_os_evolved 21.2-r2-s2 21.2-r2-s2.x
juniper / junos_os_evolved 21.3-r1-s1 21.3-r1-s1.x
juniper / junos_os_evolved 21.4-r1 21.4-r1.x
juniper / junos_os_evolved 21.4-r1-s1 21.4-r1-s1.x
juniper / junos - 20.4
juniper / junos 20.4-r3-s4 20.4-r3-s4.x
juniper / junos 20.4-r3-s5 20.4-r3-s5.x
juniper / junos 20.4-r3-s6 20.4-r3-s6.x
juniper / junos 20.4-r3-s7 20.4-r3-s7.x
juniper / junos 20.4-r3-s8 20.4-r3-s8.x
juniper / junos 20.4-r3-s9 20.4-r3-s9.x
juniper / junos 21.2-r3-s1 21.2-r3-s1.x
juniper / junos 21.2-r3-s2 21.2-r3-s2.x
juniper / junos 21.2-r3-s3 21.2-r3-s3.x
juniper / junos 21.2-r3-s4 21.2-r3-s4.x
juniper / junos 21.2-r3-s5 21.2-r3-s5.x
juniper / junos 21.2-r3-s6 21.2-r3-s6.x
juniper / junos 21.2-r3-s7 21.2-r3-s7.x
juniper / junos 21.3 21.3.x
juniper / junos 21.4 21.4.x
juniper / junos 21.4-r2-s2 21.4-r2-s2.x
juniper / junos 22.1 22.1.x
juniper / junos 22.1-r1-s1 22.1-r1-s1.x
juniper / junos 22.1-r1-s2 22.1-r1-s2.x
juniper / junos_os_evolved 21.2-r3 21.2-r3.x
juniper / junos_os_evolved 21.2-r3-s1 21.2-r3-s1.x
juniper / junos_os_evolved 21.2-r3-s2 21.2-r3-s2.x
juniper / junos_os_evolved 21.2-r3-s3 21.2-r3-s3.x
juniper / junos_os_evolved 21.2-r3-s4 21.2-r3-s4.x
juniper / junos_os_evolved 21.2-r3-s5 21.2-r3-s5.x
juniper / junos_os_evolved 21.2-r3-s6 21.2-r3-s6.x
juniper / junos_os_evolved 21.2-r3-s7 21.2-r3-s7.x
juniper / junos_os_evolved 21.3 21.3.x
juniper / junos_os_evolved 21.3-r2 21.3-r2.x
juniper / junos_os_evolved 21.3-r2-s1 21.3-r2-s1.x
juniper / junos_os_evolved 21.3-r2-s2 21.3-r2-s2.x
juniper / junos_os_evolved 21.4 21.4.x
juniper / junos_os_evolved 21.4-r1-s2 21.4-r1-s2.x
juniper / junos_os_evolved 21.4-r2 21.4-r2.x
juniper / junos_os_evolved 21.4-r2-s1 21.4-r2-s1.x
juniper / junos_os_evolved 21.4-r2-s2 21.4-r2-s2.x
juniper / junos_os_evolved 22.1 22.1.x
juniper / junos_os_evolved 22.1-r1 22.1-r1.x
juniper / junos_os_evolved 22.1-r1-s1 22.1-r1-s1.x
juniper / junos_os_evolved 22.1-r1-s2 22.1-r1-s2.x