CVE-2024-47502: Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS
First published: Fri Oct 11 2024(Updated: )
An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). In specific cases the state of TCP sessions that are terminated is not cleared, which over time leads to an exhaustion of resources, preventing new connections to the control plane from being established. A continuously increasing number of connections shown by: user@host > show system connections is indicative of the problem. To recover the respective RE needs to be restarted manually. This issue only affects IPv4 but does not affect IPv6. This issue only affects TCP sessions established in-band (over an interface on an FPC) but not out-of-band (over the management ethernet port on the routing-engine). This issue affects Junos OS Evolved: * All versions before 21.4R3-S9-EVO, * 22.2 versions before 22.2R3-S4-EVO, * 22.4 version before 22.4R3-S3-EVO, * 23.2 versions before 23.2R2-S1-EVO, * 23.4 versions before 23.4R2-EVO.
Credit: sirt@juniper.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper Networks Junos OS | <21.4R3-S9-EVO<22.2R3-S4-EVO<22.4R3-S3-EVO<23.2R2-S1-EVO<23.4R2-EVO |
Remedy
The following software releases have been updated to resolve this specific issue: 21.4R3-S9-EVO, 22.2R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S1-EVO, 23.4R2-EVO, 24.2R1-EVO, and all subsequent releases.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-47502?
CVE-2024-47502 is categorized as a medium severity vulnerability due to its potential to cause a Denial of Service.
How do I fix CVE-2024-47502?
To mitigate CVE-2024-47502, upgrade to the recommended versions of Junos OS Evolved that do not contain this vulnerability.
What type of vulnerability is CVE-2024-47502?
CVE-2024-47502 is an Allocation of Resources Without Limits or Throttling vulnerability affecting Juniper Networks' Junos OS Evolved.
Who is affected by CVE-2024-47502?
CVE-2024-47502 affects users of Juniper Networks Junos OS Evolved versions prior to 21.4R3-S9-EVO, 22.2R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S1-EVO, and 23.4R2-EVO.
What impact does CVE-2024-47502 have?
CVE-2024-47502 may allow unauthenticated, network-based attackers to cause a Denial of Service, affecting the availability of the system.
- agent/remedy
- agent/weakness
- agent/references
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/juniper networks
- canonical/juniper networks junos os