Stack-based buffer overflow in Junos OS Evolved and Junos OS - CVE-2024-39556

Vulnerability details

The vulnerability allows a local privileged user to execute arbitrary code.

A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of Service (DoS) or privileged code execution.

By exploiting the 'set security certificates' command with a crafted certificate file, a malicious attacker with access to the CLI could cause a crash of the command management daemon (mgd), limited to the local user's command interpreter, or potentially trigger a stack-based buffer overflow.

Affected software

How to mitigate CVE-2024-39556

External References

• https://supportportal.juniper.net/JSA83016

Related Security Bulletins

• Privilege escalation in Junos OS and Junos OS Evolved CLI