CVE-2024-39511: Junos OS: The 802.1X Authentication Daemon crashes on running a specific command
An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to the CLI to cause a Denial of Service (DoS).
On running a specific operational dot1x command, the dot1x daemon crashes. An attacker can cause a sustained DoS condition by running this command repeatedly.
When the crash occurs, the authentication status of any 802.1x clients is cleared, and any authorized dot1x port becomes unauthorized. The client cannot re-authenticate until the dot1x daemon restarts.
This issue affects Junos OS: All versions before 20.4R3-S10; 21.2 versions before 21.2R3-S7; 21.4 versions before 21.4R3-S6; 22.1 versions before 22.1R3-S5; 22.2 versions before 22.2R3-S3; 22.3 versions before 22.3R3-S2; 22.4 versions before 22.4R3-S1; 23.2 versions before 23.2R2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39511?
CVE-2024-39511 is classified as a Denial of Service vulnerability that can be exploited by low-privileged local attackers.
How do I fix CVE-2024-39511?
To fix CVE-2024-39511, update your affected Junos OS version to one that is patched according to Juniper's security advisory.
Which versions of Junos OS are affected by CVE-2024-39511?
CVE-2024-39511 affects Junos OS versions up to 22.4R3-S1 and includes several earlier versions.
Can CVE-2024-39511 be exploited remotely?
No, CVE-2024-39511 requires local access to the CLI for exploitation.
What impact does CVE-2024-39511 have on network security?
The vulnerability can lead to a Denial of Service condition, affecting the availability of the 802.1X Authentication daemon.