CVE-2024-30403CWE-476

Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes

High · published April 12, 2024

CVSS v4.0
7.1
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

When Layer 2 traffic is sent through a logical interface, MAC learning happens. If during this process, the interface flaps, an Advanced Forwarding Toolkit manager (evo-aftmand-bt) core is observed. This leads to a PFE restart. The crash reoccurs if the same sequence of events happens, which will lead to a sustained DoS condition.

This issue affects Juniper Networks Junos OS Evolved 23.2-EVO versions earlier than 23.2R1-S1-EVO, 23.2R2-EVO.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-04-12T15:28Z
EPSS history
Timeline
  • 12 APR 15:28Z
    Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes
    cvelistv5