CVE-2024-47496

Medium

Description

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS). When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition. This issue only affects MX Series devices with Line cards MPC1-MPC9. This issue affects: Junos OS on MX Series: * All versions before 21.4R3-S9, * from 22.2 before 22.2R3-S5,  * from 22.3 before 22.3R3-S4, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2-S1, * from 23.4 before 23.4R2.

SeverityMedium
CVSS5.5
Exploit probability10. percentile0.2%
ProductJuniper Junos
PublishedOct 11, 2024
First seenOct 11, 2024

How to fix

Update
  • juniper junos21.4 or later

Affected products

ProductAffected versionsFixed in
juniper junosv < 21.4, 21.4, 22.2, 22.3, 22.4, 23.2, 23.421.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.