CVE-2024-30409: Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).

Published Apr 12, 2024

Updated

An Improper Check for Unusual or Exceptional Conditions vulnerability in telemetry processing of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated attacker to cause the forwarding information base telemetry daemon (fibtd) to crash, leading to a limited Denial of Service.

This issue affects Juniper Networks

Junos OS: from 22.1 before 22.1R1-S2, 22.1R2.

Junos OS Evolved: from 22.1 before 22.1R1-S2-EVO, 22.1R2-EVO.

Affected Software

8 affected components

Juniper Networks Junos OS>22.1, <22.1R1-S2, >=22.1R2

Juniper Networks Junos OS Evolved>22.1, <22.1R1-S2-EVO, >=22.1R2-EVO

Juniper JUNOS=22.1

Juniper JUNOS=22.1-r1

Juniper JUNOS=22.1-r1-s1

Juniper Junos OS Evolved=22.1

Juniper Junos OS Evolved=22.1-r1

Juniper Junos OS Evolved=22.1-r1-s1

Remediation

Information

The following software releases have been updated to resolve this specific issue: Junos OS: 22.1R1-S2, 22.1R2, 22.2R1, 22.2R2, 22.3R1, 22.4R1, and all subsequent releases. Junos OS Evolved: 22.1R1-S2-EVO, 22.1R2-EVO, 22.2R1-EVO, 22.2R2-EVO, 22.3R1-EVO, 22.4R1-EVO, and all subsequent releases.

Event History

Apr 12, 2024

CVE Published

via MITRE·03:03 PM

Data Sourced

via MITRE·03:03 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 21, 57075

Event

via NVD·07:19 PM

Frequently Asked Questions

What is the severity of CVE-2024-30409?

CVE-2024-30409 is classified with a high severity rating due to its potential impact on system stability.

How do I fix CVE-2024-30409?

To resolve CVE-2024-30409, upgrade to the patched versions of Juniper Networks Junos OS and Junos OS Evolved.

What are the affected versions for CVE-2024-30409?

CVE-2024-30409 affects Junos OS versions before 22.1R2 and Junos OS Evolved versions before 22.1R2-EVO.

What type of attack does CVE-2024-30409 facilitate?

CVE-2024-30409 allows a network-based authenticated attacker to crash the forwarding information base telemetry daemon.

Is CVE-2024-30409 exploitability limited to certain network configurations?

CVE-2024-30409 specifically requires authenticated access, which may limit its exploitability depending on network configurations.