CVE-2024-21614: Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash

Published Jan 12, 2024
·
Updated

An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).

On all Junos OS and Junos OS Evolved platforms, when NETCONF and gRPC are enabled, and a specific query is executed via Dynamic Rendering (DREND), rpd will crash and restart. Continuous execution of this specific query will cause a sustained Denial of Service (DoS) condition.

This issue affects:

Juniper Networks Junos OS

22.2 versions earlier than 22.2R2-S2, 22.2R3; 22.3 versions earlier than 22.3R2, 22.3R3.

Juniper Networks Junos OS Evolved

22.2 versions earlier than 22.2R2-S2-EVO, 22.2R3-EVO; 22.3 versions earlier than 22.3R2-EVO, 22.3R3-EVO.

This issue does not affect Juniper Networks:

Junos OS versions earlier than 22.2R1;

Junos OS Evolved versions earlier than 22.2R1-EVO.

Affected Software

19 affected components
Juniper JUNOS=22.2
Juniper JUNOS=22.2-r1
Juniper JUNOS=22.2-r1-s1
Juniper JUNOS=22.2-r1-s2
Juniper JUNOS=22.2-r2
Juniper JUNOS=22.2-r2-s1
Juniper JUNOS=22.3
Juniper JUNOS=22.3-r1
Juniper JUNOS=22.3-r1-s1
Juniper JUNOS=22.3-r1-s2
Juniper Junos OS Evolved=22.2
Juniper Junos OS Evolved=22.2-r1
Juniper Junos OS Evolved=22.2-r1-s1
Juniper Junos OS Evolved=22.2-r2
Juniper Junos OS Evolved=22.2-r2-s1
Juniper Junos OS Evolved=22.3
Juniper Junos OS Evolved=22.3-r1
Juniper Junos OS Evolved=22.3-r1-s1
Juniper Junos OS Evolved=22.3-r1-s2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 22.2R2-S2
  2. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 22.2R3
  3. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 22.3R2
  4. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 22.3R3
  5. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 22.4R1
  6. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.2R2-S2-EVO
  7. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.2R3-EVO
  8. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.3R2-EVO
  9. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.3R3-EVO
  10. Upgrade

    Upgrade Juniper Networks Junos OS Evolved to a version that resolves this vulnerability.

    Fixed in 22.4R1-EVO
  11. Compensating control

    If immediate upgrade is not possible, reduce exposure by ensuring NETCONF and gRPC are not enabled on platforms where Dynamic Rendering (DREND) queries could be triggered by a network-based unauthenticated attacker.

Event History

Jan 12, 2024
CVE Published
via MITRE·12:56 AM
Data Sourced
via MITRE·12:56 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-21614?

CVE-2024-21614 has been classified with a high severity as it can lead to a Denial of Service (DoS) by crashing the Routing Protocol Daemon.

2

How do I fix CVE-2024-21614?

To fix CVE-2024-21614, update your Junos OS or Junos OS Evolved to the latest patched version provided by Juniper Networks.

3

What systems are affected by CVE-2024-21614?

CVE-2024-21614 affects Junos OS and Junos OS Evolved versions 22.2 and 22.3.

4

What impact does CVE-2024-21614 have on my network?

CVE-2024-21614 allows unauthenticated attackers to crash the Routing Protocol Daemon, resulting in potential network downtime.

5

Is CVE-2024-21614 related to any specific attacks?

CVE-2024-21614 is related to network-based Denial of Service attacks targeting the Routing Protocol Daemon in affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203