Multiple Juniper Networks Products Vulnerabilities

July 23, 2024

Severity

Medium

Analysis Summary

CVE-2024-39558 CVSS:6.5

Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by an unchecked return value vulnerability in the Routing Protocol Daemon (rpd). By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39511 CVSS:5.5

Juniper Networks Junos OS is vulnerable to a denial of service, caused by an improper input validation vulnerability in the 802.1X authentication (dot1x) Daemon. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39548 CVSS:6.5

Juniper Networks Junos OS Evolved is vulnerable to a denial of service, caused by an uncontrolled resource consumption vulnerability in the aftmand process. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39528 CVSS:5.7

Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by a use-after-free vulnerability in the Routing Protocol Daemon (rpd). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39514 CVSS:6.5

Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by an improper check or handling of exceptional conditions vulnerability in the Routing Protocol Daemon (rpd). By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39519 CVSS:6.5

Juniper Networks Junos OS Evolved is vulnerable to a denial of service, caused by an improper check for unusual or exceptional conditions vulnerability in the Packet Forwarding Engine (pfe). By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39535 CVSS:6.5

CVE-2024-39536 CVSS:5.3

Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by a missing release of memory after effective lifetime vulnerability in the Periodic Packet Management Daemon (ppmd). By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-39554 CVSS:5.9

Juniper Networks Junos OS and Junos OS Evolved are vulnerable to a denial of service, caused by a race condition in the routing protocol daemon (RPD). By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.

Impact