First published: Tue Apr 16 2024(Updated: )
An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS), which causes the l2cpd process to crash by sending a specific TLV. The l2cpd process is responsible for layer 2 control protocols, such as STP, RSTP, MSTP, VSTP, ERP, and LLDP. The impact of the l2cpd crash is reinitialization of STP protocols (RSTP, MSTP or VSTP), and MVRP and ERP, leading to a Denial of Service. Continued receipt and processing of this specific TLV will create a sustained Denial of Service (DoS) condition. This issue affects: Junos OS: all versions before 20.4R3-S9, from 21.2 before 21.2R3-S7, from 21.3 before 21.3R3-S5, from 21.4 before 21.4R3-S4, from 22.1 before 22.1R3-S4, from 22.2 before 22.2R3-S2, from 22.3 before 22.3R2-S2, 22.3R3-S1, from 22.4 before 22.4R2-S2, 22.4R3, from 23.2 before 23.2R1-S1, 23.2R2; Junos OS Evolved: all versions before 21.2R3-S7, from 21.3 before 21.3R3-S5-EVO, from 21.4 before 21.4R3-S5-EVO, from 22.1 before 22.1R3-S4-EVO, from 22.2 before 22.2R3-S2-EVO, from 22.3 before 22.3R2-S2-EVO, 22.3R3-S1-EVO, from 22.4 before 22.4R2-S2-EVO, 22.4R3-EVO, from 23.2 before 23.2R1-S1-EVO, 23.2R2-EVO.
Credit: sirt@juniper.net
Affected Software | Affected Version | How to fix |
---|---|---|
Juniper Networks Junos OS | <20.4R3-S9>21.2<21.2R3-S7>21.3<21.3R3-S5>21.4<21.4R3-S4>22.1<22.1R3-S4>22.2<22.2R3-S2>22.3<22.3R2-S2>22.3R3-S1>22.4<22.4R2-S2>22.4R3>23.2<23.2R1-S1>23.2R2 | |
Juniper Networks Junos OS Evolved | <21.2R3-S7>21.3<21.3R3-S5-EVO>21.4<21.4R3-S5-EVO>22.1<22.1R3-S4-EVO>22.2<22.2R3-S2-EVO>22.3<22.3R2-S2-EVO>22.3R3-S1-EVO>22.4<22.4R2-S2-EVO>22.4R3-EVO>23.2<23.2R1-S1-EVO>23.2R2-EVO | |
Juniper JUNOS | <20.4 | |
Juniper JUNOS | =20.4 | |
Juniper JUNOS | =20.4-r1 | |
Juniper JUNOS | =20.4-r1-s1 | |
Juniper JUNOS | =20.4-r2 | |
Juniper JUNOS | =20.4-r2-s1 | |
Juniper JUNOS | =20.4-r2-s2 | |
Juniper JUNOS | =20.4-r3 | |
Juniper JUNOS | =20.4-r3-s1 | |
Juniper JUNOS | =20.4-r3-s2 | |
Juniper JUNOS | =20.4-r3-s3 | |
Juniper JUNOS | =20.4-r3-s4 | |
Juniper JUNOS | =20.4-r3-s5 | |
Juniper JUNOS | =20.4-r3-s6 | |
Juniper JUNOS | =20.4-r3-s7 | |
Juniper JUNOS | =20.4-r3-s8 | |
Juniper JUNOS | =21.2 | |
Juniper JUNOS | =21.2-r1 | |
Juniper JUNOS | =21.2-r1-s1 | |
Juniper JUNOS | =21.2-r1-s2 | |
Juniper JUNOS | =21.2-r2 | |
Juniper JUNOS | =21.2-r2-s1 | |
Juniper JUNOS | =21.2-r2-s2 | |
Juniper JUNOS | =21.2-r3 | |
Juniper JUNOS | =21.2-r3-s1 | |
Juniper JUNOS | =21.2-r3-s2 | |
Juniper JUNOS | =21.2-r3-s3 | |
Juniper JUNOS | =21.2-r3-s4 | |
Juniper JUNOS | =21.2-r3-s5 | |
Juniper JUNOS | =21.2-r3-s6 | |
Juniper JUNOS | =21.3 | |
Juniper JUNOS | =21.3-r1 | |
Juniper JUNOS | =21.3-r1-s1 | |
Juniper JUNOS | =21.3-r1-s2 | |
Juniper JUNOS | =21.3-r2 | |
Juniper JUNOS | =21.3-r2-s1 | |
Juniper JUNOS | =21.3-r2-s2 | |
Juniper JUNOS | =21.3-r3 | |
Juniper JUNOS | =21.3-r3-s1 | |
Juniper JUNOS | =21.3-r3-s2 | |
Juniper JUNOS | =21.3-r3-s3 | |
Juniper JUNOS | =21.3-r3-s4 | |
Juniper JUNOS | =21.4 | |
Juniper JUNOS | =21.4-r1 | |
Juniper JUNOS | =21.4-r1-s1 | |
Juniper JUNOS | =21.4-r1-s2 | |
Juniper JUNOS | =21.4-r2 | |
Juniper JUNOS | =21.4-r2-s1 | |
Juniper JUNOS | =21.4-r2-s2 | |
Juniper JUNOS | =21.4-r3 | |
Juniper JUNOS | =21.4-r3-s1 | |
Juniper JUNOS | =21.4-r3-s2 | |
Juniper JUNOS | =21.4-r3-s3 | |
Juniper JUNOS | =22.1 | |
Juniper JUNOS | =22.1-r1 | |
Juniper JUNOS | =22.1-r1-s1 | |
Juniper JUNOS | =22.1-r1-s2 | |
Juniper JUNOS | =22.1-r2 | |
Juniper JUNOS | =22.1-r2-s1 | |
Juniper JUNOS | =22.1-r2-s2 | |
Juniper JUNOS | =22.1-r3 | |
Juniper JUNOS | =22.1-r3-s1 | |
Juniper JUNOS | =22.1-r3-s2 | |
Juniper JUNOS | =22.1-r3-s3 | |
Juniper JUNOS | =22.2 | |
Juniper JUNOS | =22.2-r1 | |
Juniper JUNOS | =22.2-r1-s1 | |
Juniper JUNOS | =22.2-r1-s2 | |
Juniper JUNOS | =22.2-r2 | |
Juniper JUNOS | =22.2-r2-s1 | |
Juniper JUNOS | =22.2-r2-s2 | |
Juniper JUNOS | =22.2-r3 | |
Juniper JUNOS | =22.2-r3-s1 | |
Juniper JUNOS | =22.3 | |
Juniper JUNOS | =22.3-r1 | |
Juniper JUNOS | =22.3-r1-s1 | |
Juniper JUNOS | =22.3-r1-s2 | |
Juniper JUNOS | =22.3-r2 | |
Juniper JUNOS | =22.3-r2-s1 | |
Juniper JUNOS | =22.4 | |
Juniper JUNOS | =22.4-r1 | |
Juniper JUNOS | =22.4-r1-s1 | |
Juniper JUNOS | =22.4-r1-s2 | |
Juniper JUNOS | =22.4-r2 | |
Juniper JUNOS | =22.4-r2-s1 | |
Juniper JUNOS | =23.2 | |
Juniper JUNOS | =23.2-r1 | |
Juniper Junos os Evolved | <21.2 | |
Juniper Junos os Evolved | =21.2 | |
Juniper Junos os Evolved | =21.2-r1 | |
Juniper Junos os Evolved | =21.2-r1-s1 | |
Juniper Junos os Evolved | =21.2-r1-s2 | |
Juniper Junos os Evolved | =21.2-r2 | |
Juniper Junos os Evolved | =21.2-r2-s1 | |
Juniper Junos os Evolved | =21.2-r2-s2 | |
Juniper Junos os Evolved | =21.2-r3 | |
Juniper Junos os Evolved | =21.2-r3-s1 | |
Juniper Junos os Evolved | =21.2-r3-s2 | |
Juniper Junos os Evolved | =21.2-r3-s3 | |
Juniper Junos os Evolved | =21.2-r3-s4 | |
Juniper Junos os Evolved | =21.2-r3-s5 | |
Juniper Junos os Evolved | =21.2-r3-s6 | |
Juniper Junos os Evolved | =21.3 | |
Juniper Junos os Evolved | =21.3-r1 | |
Juniper Junos os Evolved | =21.3-r1-s1 | |
Juniper Junos os Evolved | =21.3-r2 | |
Juniper Junos os Evolved | =21.3-r2-s1 | |
Juniper Junos os Evolved | =21.3-r2-s2 | |
Juniper Junos os Evolved | =21.3-r3 | |
Juniper Junos os Evolved | =21.3-r3-s1 | |
Juniper Junos os Evolved | =21.3-r3-s2 | |
Juniper Junos os Evolved | =21.3-r3-s3 | |
Juniper Junos os Evolved | =21.3-r3-s4 | |
Juniper Junos os Evolved | =21.4 | |
Juniper Junos os Evolved | =21.4-r1 | |
Juniper Junos os Evolved | =21.4-r1-s1 | |
Juniper Junos os Evolved | =21.4-r1-s2 | |
Juniper Junos os Evolved | =21.4-r2 | |
Juniper Junos os Evolved | =21.4-r2-s1 | |
Juniper Junos os Evolved | =21.4-r2-s2 | |
Juniper Junos os Evolved | =21.4-r3 | |
Juniper Junos os Evolved | =21.4-r3-s1 | |
Juniper Junos os Evolved | =21.4-r3-s2 | |
Juniper Junos os Evolved | =21.4-r3-s3 | |
Juniper Junos os Evolved | =21.4-r3-s4 | |
Juniper Junos os Evolved | =22.1 | |
Juniper Junos os Evolved | =22.1-r1 | |
Juniper Junos os Evolved | =22.1-r1-s1 | |
Juniper Junos os Evolved | =22.1-r1-s2 | |
Juniper Junos os Evolved | =22.1-r2 | |
Juniper Junos os Evolved | =22.1-r2-s1 | |
Juniper Junos os Evolved | =22.1-r3 | |
Juniper Junos os Evolved | =22.1-r3-s1 | |
Juniper Junos os Evolved | =22.1-r3-s2 | |
Juniper Junos os Evolved | =22.1-r3-s3 | |
Juniper Junos os Evolved | =22.2 | |
Juniper Junos os Evolved | =22.2-r1 | |
Juniper Junos os Evolved | =22.2-r1-s1 | |
Juniper Junos os Evolved | =22.2-r1-s2 | |
Juniper Junos os Evolved | =22.2-r2 | |
Juniper Junos os Evolved | =22.2-r2-s1 | |
Juniper Junos os Evolved | =22.2-r2-s2 | |
Juniper Junos os Evolved | =22.2-r3 | |
Juniper Junos os Evolved | =22.2-r3-s1 | |
Juniper Junos os Evolved | =22.3 | |
Juniper Junos os Evolved | =22.3-r1 | |
Juniper Junos os Evolved | =22.3-r1-s1 | |
Juniper Junos os Evolved | =22.3-r1-s2 | |
Juniper Junos os Evolved | =22.3-r2 | |
Juniper Junos os Evolved | =22.3-r2-s1 | |
Juniper Junos os Evolved | =22.4 | |
Juniper Junos os Evolved | =22.4-r1 | |
Juniper Junos os Evolved | =22.4-r1-s1 | |
Juniper Junos os Evolved | =22.4-r1-s2 | |
Juniper Junos os Evolved | =22.4-r2 | |
Juniper Junos os Evolved | =22.4-r2-s1 | |
Juniper Junos os Evolved | =23.2 | |
Juniper Junos os Evolved | =23.2-r1 |
The following software releases have been updated to resolve this specific issue: Junos OS: 20.4R3-S9, 21.2R3-S7, 21.3R3-S5, 21.4R3-S4, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2, 22.3R3-S1, 22.4R2-S2, 22.4R3, 23.2R1-S1, 23.2R2, 23.4R1, and all subsequent releases. Junos OS Evolved: 21.2R3-S7-EVO, 21.3R3-S5-EVO, 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S2-EVO, 22.3R2-S2-EVO, 22.3R3-S1-EVO, 22.4R2-S2-EVO, 22.4R3-EVO, 23.2R1-S1-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2024-30380 is currently assessed as high due to its potential for causing a Denial of Service.
To fix CVE-2024-30380, upgrade to a non-vulnerable version of Junos OS or Junos OS Evolved as recommended by the vendor.
CVE-2024-30380 affects various versions of Juniper Networks Junos OS and Junos OS Evolved, particularly versions prior to the patches released.
CVE-2024-30380 can allow an adjacent unauthenticated attacker to crash the l2cpd process, leading to Denial of Service on the affected systems.
Currently, no specific workarounds for CVE-2024-30380 have been published, and upgrading is the recommended mitigation approach.