CVE-2024-21611

published 2024-01-12

CVE-2024-21611: A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

In a Juniper Flow Monitoring (jflow) scenario route churn that causes BGP next hops to be updated will cause a slow memory leak and eventually a crash and restart of rpd.

Thread level memory utilization for the areas where the leak occurs can be checked using the below command:

user@host> show task memory detail | match so_in
so_in6 28 32 344450 11022400 344760 11032320
so_in 8 16 1841629 29466064 1841734 29467744
This issue affects:

Junos OS

* 21.4 versions earlier than 21.4R3;
* 22.1 versions earlier than 22.1R3;
* 22.2 versions earlier than 22.2R3.

Junos OS Evolved

* 21.4-EVO versions earlier than 21.4R3-EVO;
* 22.1-EVO versions earlier than 22.1R3-EVO;
* 22.2-EVO versions earlier than 22.2R3-EVO.

This issue does not affect:

Juniper Networks Junos OS versions earlier than 21.4R1.

Juniper Networks Junos OS Evolved versions earlier than 21.4R1.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper_networks	junos_os	>= 21.4 < 21.4R3	21.4R3
juniper_networks	junos_os	>= 22.1 < 22.1R3	22.1R3
juniper_networks	junos_os	>= 22.2 < 22.2R3	22.2R3
juniper_networks	junos_os_evolved	>= 21.4-EVO < 21.4R3-EVO	21.4R3-EVO
juniper_networks	junos_os_evolved	>= 22.1-EVO < 22.1R3-EVO	22.1R3-EVO
juniper_networks	junos_os_evolved	>= 22.2-EVO < 22.2R3-EVO	22.2R3-EVO

CWE-401