CVE-2024-21586

Summary

CVE-2024-21586 is a Denial-of-Service (DoS) vulnerability affecting the Packet Forwarding Engine (PFE) in Juniper Networks Junos OS on specific SRX Series and NFX Series. An unauthenticated attacker can exploit this Improper Check for Unusual or Exceptional Conditions flaw by sending specific valid traffic to a device, causing the PFE to crash and restart. This results in a sustained DoS condition if the traffic continues to be received and processed. The affected Junos OS versions on SRX Series include those before 21.4R3-S7.9, 22.1 versions before 22.1R3-S5.3, 22.2 versions before 22.2R3-S4.11, 22.3 versions before 22.3R3, and 22.4 versions before 22.4R3. For NFX Series, the impacted versions are 21.4 versions before 21.4R3-S8, 22.1 versions after 22.1R1, 22.2 versions before 22.2R3-S5, 22.3 versions before 22.3R3, and 22.4 versions before 22.4R3. Junos OS versions prior to 21.4R1 are not affected by this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.