CVE-2024-21614: Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash
An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).
On all Junos OS and Junos OS Evolved platforms, when NETCONF and gRPC are enabled, and a specific query is executed via Dynamic Rendering (DREND), rpd will crash and restart. Continuous execution of this specific query will cause a sustained Denial of Service (DoS) condition.
This issue affects:
Juniper Networks Junos OS
22.2 versions earlier than 22.2R2-S2, 22.2R3; 22.3 versions earlier than 22.3R2, 22.3R3.
Juniper Networks Junos OS Evolved
22.2 versions earlier than 22.2R2-S2-EVO, 22.2R3-EVO; 22.3 versions earlier than 22.3R2-EVO, 22.3R3-EVO.
This issue does not affect Juniper Networks:
Junos OS versions earlier than 22.2R1;
Junos OS Evolved versions earlier than 22.2R1-EVO.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Junos OSto a version that resolves this vulnerability.Fixed in 22.2R2-S2 - Upgrade
Upgrade
Juniper Networks Junos OSto a version that resolves this vulnerability.Fixed in 22.2R3 - Upgrade
Upgrade
Juniper Networks Junos OSto a version that resolves this vulnerability.Fixed in 22.3R2 - Upgrade
Upgrade
Juniper Networks Junos OSto a version that resolves this vulnerability.Fixed in 22.3R3 - Upgrade
Upgrade
Juniper Networks Junos OSto a version that resolves this vulnerability.Fixed in 22.4R1 - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.2R2-S2-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.2R3-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.3R2-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.3R3-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.4R1-EVO - Compensating control
If immediate upgrade is not possible, reduce exposure by ensuring NETCONF and gRPC are not enabled on platforms where Dynamic Rendering (DREND) queries could be triggered by a network-based unauthenticated attacker.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21614?
CVE-2024-21614 has been classified with a high severity as it can lead to a Denial of Service (DoS) by crashing the Routing Protocol Daemon.
How do I fix CVE-2024-21614?
To fix CVE-2024-21614, update your Junos OS or Junos OS Evolved to the latest patched version provided by Juniper Networks.
What systems are affected by CVE-2024-21614?
CVE-2024-21614 affects Junos OS and Junos OS Evolved versions 22.2 and 22.3.
What impact does CVE-2024-21614 have on my network?
CVE-2024-21614 allows unauthenticated attackers to crash the Routing Protocol Daemon, resulting in potential network downtime.
Is CVE-2024-21614 related to any specific attacks?
CVE-2024-21614 is related to network-based Denial of Service attacks targeting the Routing Protocol Daemon in affected systems.