CVE-2024-47496: Junos OS: MX Series: The PFE will crash on running specific command
A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service (DoS).
When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the system self-recovers. Repeated execution will create a sustained DoS condition.
This issue only affects MX Series devices with Line cards MPC1-MPC9. This issue affects: Junos OS on MX Series:
All versions before 21.4R3-S9, from 22.2 before 22.2R3-S5, from 22.3 before 22.3R3-S4, from 22.4 before 22.4R3-S2, from 23.2 before 23.2R2-S1, from 23.4 before 23.4R2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47496?
CVE-2024-47496 is classified as a Denial-of-Service (DoS) vulnerability affecting Juniper Networks Junos OS.
How do I fix CVE-2024-47496?
To mitigate CVE-2024-47496, it is recommended to upgrade to the latest version of Junos OS provided by Juniper Networks that is not affected by this vulnerability.
What kind of attacks can CVE-2024-47496 enable?
CVE-2024-47496 can be exploited by local, low-privileged attackers to crash the Packet Forwarding Engine, leading to service disruption.
Which versions of Junos OS are affected by CVE-2024-47496?
CVE-2024-47496 impacts Junos OS versions prior to 21.4R3-S9 and includes select versions from 22.2, 22.3, 22.4, and 23.2 up to 23.4R2.
Is remote access needed to exploit CVE-2024-47496?
No, exploitation of CVE-2024-47496 requires only low-privilege local access to the device.