CVE-2024-30387: Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash
A Missing Synchronization vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on ACX5448 and ACX710 allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).
If an interface flaps while the system gathers statistics on that interface, two processes simultaneously access a shared resource which leads to a PFE crash and restart.
This issue affects Junos OS:
All versions before 20.4R3-S9, 21.2 versions before 21.2R3-S5, 21.3 versions before 21.3R3-S5, 21.4 versions before 21.4R3-S4, 22.1 versions before 22.1R3-S2, 22.2 versions before 22.2R3-S2, 22.3 versions before 22.3R2-S2, 22.3R3, 22.4 versions before 22.4R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30387?
CVE-2024-30387 is classified as a high severity vulnerability due to its potential to cause denial-of-service (DoS) conditions.
How do I fix CVE-2024-30387?
To mitigate CVE-2024-30387, update your Junos OS to a version that addresses this vulnerability as specified by Juniper Networks.
What products are affected by CVE-2024-30387?
CVE-2024-30387 affects Juniper Networks Junos OS running on ACX5448 and ACX710 devices.
What type of vulnerability is CVE-2024-30387?
CVE-2024-30387 is categorized as a Missing Synchronization vulnerability.
Can CVE-2024-30387 be exploited remotely?
CVE-2024-30387 requires an adjacent attacker, so it cannot be exploited remotely without local access.