CVE-2024-39538: Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes
A Buffer Copy without Checking Size of Input vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a
Denial-of-Service (DoS).When multicast traffic with a specific, valid (S,G) is received, evo-pfemand crashes which leads to an outage of the affected FPC until it is manually recovered.
This issue affects Junos OS Evolved on ACX7000 Series:
All versions before 21.2R3-S8-EVO, 21.4-EVO versions before 21.4R3-S7-EVO, 22.2-EVO versions before 22.2R3-S4-EVO, 22.3-EVO versions before 22.3R3-S3-EVO, 22.4-EVO versions before 22.4R3-S2-EVO, 23.2-EVO versions before 23.2R2-EVO, 23.4-EVO versions before 23.4R1-S2-EVO, 23.4R2-EVO.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39538?
CVE-2024-39538 has been classified as a high severity vulnerability that can lead to Denial-of-Service (DoS).
How do I fix CVE-2024-39538?
To fix CVE-2024-39538, update the Junos OS Evolved to a version later than 23.4R1-S2 and ensure that all patches are applied.
Who is affected by CVE-2024-39538?
CVE-2024-39538 affects Juniper Networks Junos OS Evolved versions up to 23.4R1-S2 on ACX7000 Series routers.
What type of attack can exploit CVE-2024-39538?
CVE-2024-39538 can be exploited by an unauthenticated adjacent attacker to cause Denial-of-Service (DoS) conditions.
What components of Junos OS Evolved are impacted by CVE-2024-39538?
CVE-2024-39538 specifically impacts the PFE management daemon (evo-pfemand) of Junos OS Evolved.