CVE-2024-30405: Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service
An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker sending specific crafted packets to cause a transit traffic Denial of Service (DoS).
Continued receipt and processing of these specific packets will sustain the Denial of Service condition.
This issue affects: Juniper Networks Junos OS SRX 5000 Series with SPC2 with ALGs enabled. All versions earlier than 21.2R3-S7; 21.4 versions earlier than 21.4R3-S6; 22.1 versions earlier than 22.1R3-S5; 22.2 versions earlier than 22.2R3-S3; 22.3 versions earlier than 22.3R3-S2; 22.4 versions earlier than 22.4R3; 23.2 versions earlier than 23.2R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30405?
CVE-2024-30405 has a high severity rating due to its potential to cause a Denial of Service (DoS) condition.
How do I fix CVE-2024-30405?
To remediate CVE-2024-30405, update your Junos OS SRX 5000 Series devices to the latest patched version.
Which devices are affected by CVE-2024-30405?
CVE-2024-30405 affects Juniper Networks Junos OS SRX 5000 Series devices that use SPC2 line cards with ALGs enabled.
What impact does CVE-2024-30405 have on network availability?
CVE-2024-30405 can lead to transit traffic Denial of Service (DoS), disrupting network availability.
How can attackers exploit CVE-2024-30405?
Attackers can exploit CVE-2024-30405 by sending specifically crafted packets to trigger the buffer size calculation issue.