CVE-2024-21612: Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE

Published Jan 12, 2024
·
Updated

An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

On all Junos OS Evolved platforms, when specific TCP packets are received on an open OFP port, the OFP crashes leading to a restart of Routine Engine (RE). Continuous receipt of these specific TCP packets will lead to a sustained Denial of Service (DoS) condition.

This issue affects:

Juniper Networks Junos OS Evolved

All versions earlier than 21.2R3-S7-EVO; 21.3 versions earlier than 21.3R3-S5-EVO ; 21.4 versions earlier than 21.4R3-S5-EVO; 22.1 versions earlier than 22.1R3-S4-EVO; 22.2 versions earlier than 22.2R3-S3-EVO ; 22.3 versions earlier than 22.3R3-EVO; 22.4 versions earlier than 22.4R2-EVO, 22.4R3-EVO.

Affected Software

68 affected components
Juniper Junos OS Evolved<21.2
Juniper Junos OS Evolved=21.2
Juniper Junos OS Evolved=21.2-r1
Juniper Junos OS Evolved=21.2-r1-s1
Juniper Junos OS Evolved=21.2-r1-s2
Juniper Junos OS Evolved=21.2-r2
Juniper Junos OS Evolved=21.2-r2-s1
Juniper Junos OS Evolved=21.2-r2-s2
Juniper Junos OS Evolved=21.2-r3
Juniper Junos OS Evolved=21.2-r3-s1
Juniper Junos OS Evolved=21.2-r3-s2
Juniper Junos OS Evolved=21.2-r3-s3
Juniper Junos OS Evolved=21.2-r3-s4
Juniper Junos OS Evolved=21.2-r3-s5
Juniper Junos OS Evolved=21.2-r3-s6
Juniper Junos OS Evolved=21.3
Juniper Junos OS Evolved=21.3-r1
Juniper Junos OS Evolved=21.3-r1-s1
Juniper Junos OS Evolved=21.3-r2
Juniper Junos OS Evolved=21.3-r2-s1
Juniper Junos OS Evolved=21.3-r2-s2
Juniper Junos OS Evolved=21.3-r3
Juniper Junos OS Evolved=21.3-r3-s1
Juniper Junos OS Evolved=21.3-r3-s2
Juniper Junos OS Evolved=21.3-r3-s3
Juniper Junos OS Evolved=21.3-r3-s4
Juniper Junos OS Evolved=21.4
Juniper Junos OS Evolved=21.4-r1
Juniper Junos OS Evolved=21.4-r1-s1
Juniper Junos OS Evolved=21.4-r1-s2
Juniper Junos OS Evolved=21.4-r2
Juniper Junos OS Evolved=21.4-r2-s1
Juniper Junos OS Evolved=21.4-r2-s2
Juniper Junos OS Evolved=21.4-r3
Juniper Junos OS Evolved=21.4-r3-s1
Juniper Junos OS Evolved=21.4-r3-s2
Juniper Junos OS Evolved=21.4-r3-s3
Juniper Junos OS Evolved=21.4-r3-s4
Juniper Junos OS Evolved=22.1
Juniper Junos OS Evolved=22.1-r1
Juniper Junos OS Evolved=22.1-r1-s1
Juniper Junos OS Evolved=22.1-r1-s2
Juniper Junos OS Evolved=22.1-r2
Juniper Junos OS Evolved=22.1-r2-s1
Juniper Junos OS Evolved=22.1-r3
Juniper Junos OS Evolved=22.1-r3-s1
Juniper Junos OS Evolved=22.1-r3-s2
Juniper Junos OS Evolved=22.1-r3-s3
Juniper Junos OS Evolved=22.2
Juniper Junos OS Evolved=22.2-r1
Juniper Junos OS Evolved=22.2-r1-s1
Juniper Junos OS Evolved=22.2-r2
Juniper Junos OS Evolved=22.2-r2-s1
Juniper Junos OS Evolved=22.2-r2-s2
Juniper Junos OS Evolved=22.2-r3
Juniper Junos OS Evolved=22.2-r3-s1
Juniper Junos OS Evolved=22.2-r3-s2
Juniper Junos OS Evolved=22.3
Juniper Junos OS Evolved=22.3-r1
Juniper Junos OS Evolved=22.3-r1-s1
Juniper Junos OS Evolved=22.3-r1-s2
Juniper Junos OS Evolved=22.3-r2
Juniper Junos OS Evolved=22.3-r2-s1
Juniper Junos OS Evolved=22.3-r2-s2
Juniper Junos OS Evolved=22.4
Juniper Junos OS Evolved=22.4-r1
Juniper Junos OS Evolved=22.4-r1-s1
Juniper Junos OS Evolved=22.4-r1-s2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 21.2R3-S7-EVO
  2. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 21.3R3-S5-EVO
  3. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 21.4R3-S5-EVO
  4. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.1R3-S4-EVO
  5. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.2R3-S3-EVO
  6. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.3R3-EVO
  7. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.4R2-EVO
  8. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.4R3-EVO
  9. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 23.2R1-EVO
  10. Compensating control

    Mitigate the Denial of Service by preventing the specific TCP packets from reaching an open OFP port on Junos OS Evolved platforms (e.g., restrict/close access to the OFP port so that attack traffic cannot be received).

Event History

Jan 12, 2024
CVE Published
via MITRE·12:55 AM
Data Sourced
via MITRE·12:55 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-21612?

CVE-2024-21612 has been classified as a High severity vulnerability due to its potential to cause a Denial of Service.

2

How do I fix CVE-2024-21612?

To address CVE-2024-21612, upgrade to Junos OS Evolved version 21.2 or later, as per the vendor's recommendations.

3

What can an attacker do with CVE-2024-21612?

An unauthenticated, network-based attacker can exploit CVE-2024-21612 to induce a Denial of Service on affected systems.

4

Which Juniper Networks products are affected by CVE-2024-21612?

CVE-2024-21612 affects all Junos OS Evolved platforms prior to version 21.2.

5

Is there a workaround for CVE-2024-21612?

Currently, there are no specific workarounds available for CVE-2024-21612, and upgrading is recommended for mitigation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203