CVE-2024-30403— Juniper Networks Junos OS Evolved 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-30403の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes
ソース: CVE Program / CVE List V5
脆弱性説明
A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When Layer 2 traffic is sent through a logical interface, MAC learning happens. If during this process, the interface flaps, an Advanced Forwarding Toolkit manager (evo-aftmand-bt) core is observed. This leads to a PFE restart. The crash reoccurs if the same sequence of events happens, which will lead to a sustained DoS condition. This issue affects Juniper Networks Junos OS Evolved 23.2-EVO versions earlier than 23.2R1-S1-EVO, 23.2R2-EVO.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
空指针解引用
ソース: CVE Program / CVE List V5
脆弱性タイトル
Juniper Networks Junos OS Evolved 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。 Juniper Networks Junos OS Evolved 存在安全漏洞，该漏洞源于存在空指针取消引用漏洞，允许未经身份验证的相邻攻击者造成拒绝服务(DoS)。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Juniper Networks | Junos OS Evolved | 23.2-EVO ~ 23.2R1-S1-EVO, 23.2R2-EVO | - |
II. CVE-2024-30403の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-30403のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-30403 新闻报道 (1)
- Common Vulnerability Scoring System Version 4.0 Calculatortechnical-description
CVE-2024-30403 其他参考 (1)
- Common Vulnerability Scoring System Version 4.0 Calculatortechnical-description
CVE-2024-30403 其他参考 (1)
- https://supportportal.juniper.net/JSA79181vendor-advisory
Same Patch Batch · Juniper Networks · 2024-04-12 · 29 CVEs total
| CVE-2024-30381 | 8.4 HIGH | Paragon Active Assurance: probe_serviced exposes internal objects to local users |
| CVE-2024-30398 | 7.5 HIGH | Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an ev |
| CVE-2024-21598 | 7.5 HIGH | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to |
| CVE-2024-30397 | 7.5 HIGH | Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange ( |
| CVE-2024-30382 | 7.5 HIGH | Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configu |
| CVE-2024-30392 | 7.5 HIGH | Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specifi |
| CVE-2024-30394 | 7.5 HIGH | Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash |
| CVE-2024-30395 | 7.5 HIGH | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to |
| CVE-2024-30405 | 7.5 HIGH | Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is en |
| CVE-2024-21593 | 6.5 MEDIUM | Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will caus |
| CVE-2024-30387 | 6.5 MEDIUM | Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash |
| CVE-2024-30388 | 6.5 MEDIUM | Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps |
| CVE-2024-21618 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is receive |
| CVE-2024-21609 | 6.5 MEDIUM | Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated |
| CVE-2024-21605 | 6.5 MEDIUM | Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload |
| CVE-2024-30401 | 5.9 MEDIUM | Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman |
| CVE-2024-30402 | 5.9 MEDIUM | Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a sp |
| CVE-2024-30410 | 5.8 MEDIUM | Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term. |
| CVE-2024-30389 | 5.8 MEDIUM | Junos OS: EX4300 Series: Firewall filter not blocking egress traffic |
| CVE-2024-30406 | 5.5 MEDIUM | Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privil |
Showing 20 of 29 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Junos OS Evolved
- CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil - CVE-2026-57028
Junos OS Evolved: A port which has been inadvertently expose - CVE-2026-33803
Junos OS Evolved: A port which has been inadvertently expose - CVE-2026-33794
Junos OS Evolved: PTX Series: Receipt of repeated ECMP routi - CVE-2026-33783
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned vi
同じベンダー: Juniper Networks
- CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall - CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry - CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in - CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared - CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
同じ弱点: CWE-476
- CVE-2026-12051
NULL pointer dereference in USB DFU device_next download han - CVE-2026-19411
Shim/dp.c library: null-pointer dereference in is_removable_ - CVE-2026-11810
NULL-pointer dereference in UpdateHub OTA agent on empty inn - CVE-2026-71967
OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine P - CVE-2026-72582
fastschema - Unauthenticated NULL Pointer Dereference DoS in
V. CVE-2024-30403へのコメント
まだコメントはありません