SB2024041111 - Improper check or handling of exceptional conditions in Juniper Junos OS

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper check or handling of exceptional conditions (CVE-ID: CVE-2024-21593)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper check or handling of exceptional conditions error in the Packet Forwarding Engine (PFE). A remote non-authenticated attacker can cause a Denial of Service (DoS).

If an attacker sends a specific MPLS packet, which upon processing, causes an internal loop, that leads to a PFE crash and restart.

Continued receipt of these packets leads to a sustained Denial of Service (DoS) condition.

Remediation

Install update from vendor's website.

References

• https://supportportal.juniper.net/s/article/2024-04-Security-Bulletin-Junos-OS-MX-Series-with-MPC10-MPC11-LC9600-and-MX304-A-specific-MPLS-packet-will-cause-a-PFE-crash-CVE-2024-21593