CVE-2024-39528: Use-After-Free DoS in Junos OS rpd (pre-21.2R3)
CVE-2024-39528 Published on July 11, 2024

Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash
A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to cause a Denial of Service (DoS).On all Junos OS and Junos Evolved platforms, if a routing-instance deactivation is triggered, and at the same time a specific SNMP request is received, a segmentation fault occurs which causes rpd to crash and restart. This issue affects: Junos OS: * All versions before 21.2R3-S8, * 21.4 versions before 21.4R3-S5, * 22.2 versions before 22.2R3-S3, * 22.3 versions before 22.3R3-S2, * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R2. Junos OS Evolved: * All versions before 21.2R3-S8-EVO, * 21.4-EVO versions before 21.4R3-S5-EVO, * 22.2-EVO versions before 22.2R3-S3-EVO, * 22.3-EVO versions before 22.3R3-S2-EVO, * 22.4-EVO versions before 22.4R3-EVO, * 23.2-EVO versions before 23.2R2-EVO.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2024-39528 is exploitable with network access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

REQUIRED

Scope:

UNCHANGED

Confidentiality Impact:

NONE

Integrity Impact:

NONE

Availability Impact:

HIGH

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2024-39528 has been classified to as a Dangling pointer vulnerability or weakness.

Products Associated with CVE-2024-39528

stack.watch emails you whenever new vulnerabilities are published in Juniper Networks Junos or Juniper Networks Junos Os Evolved. Just hit a watch button to start following.

Juniper Networks Junos

Juniper Networks Junos Os Evolved

Affected Versions

Juniper Networks Junos OS:

Before 21.2R3-S8 is affected.
Version 21.4 and below 21.4R3-S5 is affected.
Version 22.2 and below 22.2R3-S3 is affected.
Version 22.3 and below 22.3R3-S2 is affected.
Version 22.4 and below 22.4R3 is affected.
Version 23.2 and below 23.2R2 is affected.

Juniper Networks Junos OS Evolved:

Before 21.2R3-S8-EVO is affected.
Version 21.4-EVO and below 21.4R3-S5-EVO is affected.
Version 22.2-EVO and below 22.2R3-S3-EVO is affected.
Version 22.3-EVO and below 22.3R3-S2-EVO is affected.
Version 22.4-EVO and below 22.4R3-EVO is affected.
Version 23.2-EVO and below 23.2R2-EVO is affected.

Exploit Probability

EPSS

0.41%

Percentile

60.79%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.