high
7.5
CWE
1286
EPSS
0.052%
Advisory Published
Updated

CVE-2024-21595: Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang

First published: Fri Jan 12 2024(Updated: )

An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). If an attacker sends high rate of specific ICMP traffic to a device with VXLAN configured, this causes a deadlock of the PFE and results in the device becoming unresponsive. A manual restart will be required to recover the device. This issue only affects EX4100, EX4400, EX4600, QFX5000 Series devices. This issue affects: Juniper Networks Junos OS * 21.4R3 versions earlier than 21.4R3-S4; * 22.1R3 versions earlier than 22.1R3-S3; * 22.2R2 versions earlier than 22.2R3-S1; * 22.3 versions earlier than 22.3R2-S2, 22.3R3; * 22.4 versions earlier than 22.4R2; * 23.1 versions earlier than 23.1R2.

Credit: sirt@juniper.net

Affected SoftwareAffected VersionHow to fix
All of
Any of
Junos OS Evolved=21.4-r3
Junos OS Evolved=21.4-r3-s1
Junos OS Evolved=21.4-r3-s2
Junos OS Evolved=21.4-r3-s3
Junos OS Evolved=22.1-r3
Junos OS Evolved=22.1-r3-s1
Junos OS Evolved=22.1-r3-s2
Junos OS Evolved=22.2-r2
Junos OS Evolved=22.2-r2-s1
Junos OS Evolved=22.2-r2-s2
Junos OS Evolved=22.2-r3
Junos OS Evolved=22.3
Junos OS Evolved=22.3-r1
Junos OS Evolved=22.3-r1-s1
Junos OS Evolved=22.3-r1-s2
Junos OS Evolved=22.3-r2
Junos OS Evolved=22.3-r2-s1
Junos OS Evolved=22.4
Junos OS Evolved=22.4-r1
Junos OS Evolved=22.4-r1-s1
Junos OS Evolved=22.4-r1-s2
Junos OS Evolved=23.1-r1
Any of
Juniper EX Series
Juniper EX4400-24X
Juniper EX4600
Juniper QFX5100
Juniper QFX5100
Juniper QFX5110
Juniper QFX5120
Juniper Networks QFX-Series
Juniper QFX5200-32C
Juniper QFX5200
Juniper QFX5200
Juniper QFX5210-64C
Juniper QFX5210
Juniper QFX5220
Juniper QFX5700

Remedy

The following software releases have been updated to resolve this specific issue: Junos OS 21.4R3-S4, 22.1R3-S3, 22.2R3-S1, 22.3R2-S2, 22.3R3, 22.4R2, 23.1R2, 23.2R1, and all subsequent releases.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2024-21595?

    CVE-2024-21595 has been rated with a high severity due to its potential to cause Denial of Service (DoS).

  • How do I fix CVE-2024-21595?

    To mitigate CVE-2024-21595, apply the latest patches provided by Juniper Networks for affected Junos OS versions.

  • Which Junos OS versions are affected by CVE-2024-21595?

    CVE-2024-21595 affects Junos OS versions 21.4-r3, 22.1 (all revisions), 22.2 (all revisions), 22.3 (all revisions), and 22.4 (all revisions).

  • Can CVE-2024-21595 be exploited remotely?

    Yes, CVE-2024-21595 can be exploited remotely by an unauthenticated attacker through high rates of specific ICMP traffic.

  • What types of devices are impacted by CVE-2024-21595?

    CVE-2024-21595 primarily impacts devices running vulnerable Junos OS versions, such as routers and switches from Juniper Networks.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203