CVE-2024-21617

Summary

CVE-2024-21617 is a vulnerability affecting Juniper Networks Junos OS where an incomplete cleanup issue in the Nonstop active routing (NSR) component leads to a memory leak, resulting in a Denial of Service (DoS) attack. This issue occurs when NSR is enabled and a BGP flap event happens, causing excessive memory consumption. The affected Junos OS versions include 21.2, 21.3, 21.4, 22.1, 22.2, 22.3, and 22.4, while versions earlier than 20.4R3-S7 remain unaffected. To monitor memory usage, users can utilize the 'show chassis routing-engine no-forwarding' and 'show system memory' commands. This vulnerability does not impact the SRX Series as NSR is not supported on that platform.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.