Juniper Junos OS BGP traceoptions Out-of-Bounds Read DoS (CVE-2024-39516)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: 2024-10 Security Bulletin: Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash (CVE-2024-39516) - Affected Products: Junos OS and Junos OS Evolved - Vulnerability Type: Out-of-Bounds Read vulnerability - Impact: An unauthenticated network attacker can send malicious BGP update packets, causing the RPD process to crash and restart, resulting in a Denial of Service (DoS). 2. Affected Scope: - Affected Junos OS Versions: - All versions prior to 21.4R3-S8 - All versions prior to 22.2R3-S5 - All versions prior to 22.3R3-S4 - All versions prior to 22.4R3-S3 - All versions prior to 23.2R2-S2 - All versions prior to 23.4R2 - Affected Junos OS Evolved Versions: - All versions prior to 21.4R3-S8-EVO - All versions prior to 22.2R3-S5-EVO - All versions prior to 22.3R3-S4-EVO - All versions prior to 22.4R3-S3-EVO - All versions prior to 23.2R2-S2-EVO - All versions prior to 23.4R2-EVO 3. Mitigation: - Upgrade to the affected software versions. - Disable BGP traceoptions if they are not actively used for troubleshooting. 4. Vulnerability Rating: - CVSS v3.1: 7.5 - CVSS v4.0: 8.7 5. Other Affected Products: - Junos OS SRX Series, QFX Series, MX Series, and EX Series - Junos OS J-Web - Junos OS Evolved 6. Vulnerability Reporter: - Craig Dods, from Meta’s Infrastructure Security Engineering team. This information helps users understand the vulnerability details, the scope of affected products, mitigation steps, and the severity rating.

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS BGP traceoptions Out-of-Bounds Read DoS (CVE-2024-39516)