CVE-2024-39540

Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash

Published Jul 11, 2024 CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

When an affected device receives specific valid TCP traffic, the pfe crashes and restarts leading to a momentary but complete service outage.

This issue affects Junos OS:

21.2 releases from 21.2R3-S5 before 21.2R3-S6.

This issue does not affect earlier or later releases.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: 21.2R3-S6.


Vendor Workaround

There are no known workarounds for this issue.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-38066 An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device receives specific valid TCP traffic, the pfe crashes and restarts leading to a momentary but complete service outage. This issue affects Junos OS: 21.2 releases from 21.2R3-S5 before 21.2R3-S6. This issue does not affect earlier or later releases.
References
History
Type Values Removed Values Added
First Time appeared Juniper csrx
Juniper mx240
Juniper mx480
Juniper mx960
Juniper srx100
Juniper srx110
Juniper srx1400
Juniper srx1500
Juniper srx1600
Juniper srx210
Juniper srx220
Juniper srx2300
Juniper srx240
Juniper srx240h2
Juniper srx240m
Juniper srx300
Juniper srx320
Juniper srx340
Juniper srx3400
Juniper srx345
Juniper srx3600
Juniper srx380
Juniper srx4000
Juniper srx4100
Juniper srx4200
Juniper srx4300
Juniper srx4600
Juniper srx4700
Juniper srx5000
Juniper srx5400
Juniper srx550
Juniper srx550 Hm
Juniper srx550m
Juniper srx5600
Juniper srx5800
Juniper srx650
Juniper vsrx
CPEs cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*
Vendors & Products Juniper csrx
Juniper mx240
Juniper mx480
Juniper mx960
Juniper srx100
Juniper srx110
Juniper srx1400
Juniper srx1500
Juniper srx1600
Juniper srx210
Juniper srx220
Juniper srx2300
Juniper srx240
Juniper srx240h2
Juniper srx240m
Juniper srx300
Juniper srx320
Juniper srx340
Juniper srx3400
Juniper srx345
Juniper srx3600
Juniper srx380
Juniper srx4000
Juniper srx4100
Juniper srx4200
Juniper srx4300
Juniper srx4600
Juniper srx4700
Juniper srx5000
Juniper srx5400
Juniper srx550
Juniper srx550 Hm
Juniper srx550m
Juniper srx5600
Juniper srx5800
Juniper srx650
Juniper vsrx