CVE-2024-21609

published 2024-04-12

CVE-2024-21609: A Missing Release of Memory after Effective Lifetime vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series…

high 7.1 CVSS 4.0

AV A AC L AT N PR N UI N VC N VI N VA H SC N SI N SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A Missing Release of Memory after Effective Lifetime vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an administratively adjacent attacker which is able to successfully establish IPsec tunnels to cause a Denial of Service (DoS).

If specific values for the IPsec parameters local-ip, remote-ip, remote ike-id, and traffic selectors are sent from the peer, a memory leak occurs during every IPsec SA rekey which is carried out with a specific message sequence. This will eventually result in an iked process crash and restart.

The iked process memory consumption can be checked using the below command:
user@host> show system processes extensive | grep iked
PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
56903 root 31 0 4016M 2543M CPU0 0 2:10 10.50% iked

This issue affects Juniper Networks Junos OS:
* All versions earlier than 20.4R3-S9;
* 21.2 versions earlier than 21.2R3-S7;
* 21.3 versions earlier than 21.3R3-S5;
* 21.4 versions earlier than 21.4R3-S4;
* 22.1 versions earlier than 22.1R3-S3;
* 22.2 versions earlier than 22.2R3-S2;
* 22.3 versions earlier than 22.3R3;
* 22.4 versions earlier than 22.4R3;
* 23.2 versions earlier than 23.2R1-S2, 23.2R2.

Affected

22 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	< 20.4	20.4
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	mx_series	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	< 20.4R3-S9	20.4R3-S9
juniper_networks	junos_os	>= 21.2 < 21.2R3-S7	21.2R3-S7
juniper_networks	junos_os	>= 21.3 < 21.3R3-S5	21.3R3-S5
juniper_networks	junos_os	>= 21.4 < 21.4R3-S4	21.4R3-S4
juniper_networks	junos_os	>= 22.1 < 22.1R3-S3	22.1R3-S3
juniper_networks	junos_os	>= 22.2 < 22.2R3-S2	22.2R3-S2
juniper_networks	junos_os	>= 22.3 < 22.3R3	22.3R3
juniper_networks	junos_os	>= 22.4 < 22.4R3	22.4R3
juniper_networks	junos_os	>= 23.2 < 23.2R1-S2, 23.2R2	23.2R1-S2, 23.2R2

CWE-401