CVE-2024-21599

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 12, 2024
Updated: Jan 19, 2024
CWE ID 401

Summary

CVE-2024-21599 is a vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series. It allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). The vulnerability occurs when an MX Series device receives Precision Time Protocol (PTP) packets on an MPC3E that does not support PTP, resulting in a memory leak and unpredictable behavior. This can lead to an MPC crash and restart. The affected products include various versions of Juniper Networks Junos OS on MX Series with MPC3E. To monitor for this issue, specific commands can be used to check for increased "LAN buffer" utilization and non-zero "Pending PFEs" counter. The potential danger this vulnerability poses to organizations is a DoS attack that can disrupt network operations and impact availability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-21599 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options