Vulnerability Details CVE-2024-39538
A Buffer Copy without Checking Size of Input vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated, adjacent attacker to cause a
Denial-of-Service (DoS).When multicast traffic with a specific, valid (S,G) is received, evo-pfemand crashes which leads to an outage of the affected FPC until it is manually recovered.
This issue affects Junos OS Evolved on ACX7000 Series:
* All versions before 21.2R3-S8-EVO,
* 21.4-EVO versions before 21.4R3-S7-EVO,
* 22.2-EVO versions before 22.2R3-S4-EVO,
* 22.3-EVO versions before 22.3R3-S3-EVO,
* 22.4-EVO versions before 22.4R3-S2-EVO,
* 23.2-EVO versions before 23.2R2-EVO,
* 23.4-EVO versions before 23.4R1-S2-EVO, 23.4R2-EVO.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.7%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-39538
-
cpe:2.3:h:juniper:acx7020:-
-
cpe:2.3:h:juniper:acx7024:-
-
cpe:2.3:h:juniper:acx7024x:-
-
cpe:2.3:h:juniper:acx7100:-
-
cpe:2.3:h:juniper:acx7300:-
-
cpe:2.3:h:juniper:acx7509:-
-
cpe:2.3:o:juniper:junos_os_evolved:18.3
-
cpe:2.3:o:juniper:junos_os_evolved:19.1
-
cpe:2.3:o:juniper:junos_os_evolved:19.2
-
cpe:2.3:o:juniper:junos_os_evolved:19.3
-
cpe:2.3:o:juniper:junos_os_evolved:19.4
-
cpe:2.3:o:juniper:junos_os_evolved:20.1
-
cpe:2.3:o:juniper:junos_os_evolved:20.2
-
cpe:2.3:o:juniper:junos_os_evolved:20.3
-
cpe:2.3:o:juniper:junos_os_evolved:20.4
-
cpe:2.3:o:juniper:junos_os_evolved:21.1
-
cpe:2.3:o:juniper:junos_os_evolved:21.2
-
cpe:2.3:o:juniper:junos_os_evolved:21.4
-
cpe:2.3:o:juniper:junos_os_evolved:22.2
-
cpe:2.3:o:juniper:junos_os_evolved:22.3
-
cpe:2.3:o:juniper:junos_os_evolved:22.4
-
cpe:2.3:o:juniper:junos_os_evolved:23.2
-
cpe:2.3:o:juniper:junos_os_evolved:23.4