CVE-2024-30392

published 2024-04-12

CVE-2024-30392: A Stack-based Buffer Overflow vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to…

high 8.7 CVSS 4.0

AV N AC L AT N PR N UI N VC N VI N VA H SC N SI N SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A Stack-based Buffer Overflow vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS).

On all Junos OS MX Series platforms with SPC3 and MS-MPC/-MIC, when URL filtering is enabled and a specific URL request is received and processed, flowd will crash and restart. Continuous reception of the specific URL request will lead to a sustained Denial of Service (DoS) condition.

This issue affects:
Junos OS:

* all versions before 21.2R3-S6,

* from 21.3 before 21.3R3-S5,

* from 21.4 before 21.4R3-S5,

* from 22.1 before 22.1R3-S3,

* from 22.2 before 22.2R3-S1,

* from 22.3 before 22.3R2-S2, 22.3R3,

* from 22.4 before 22.4R2-S1, 22.4R3.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	< 21.2	21.2
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	mx_series	—	—
juniper_networks	junos_os	< 21.2R3-S6	21.2R3-S6
juniper_networks	junos_os	>= 21.3 < 21.3R3-S5	21.3R3-S5
juniper_networks	junos_os	>= 21.4 < 21.4R3-S5	21.4R3-S5
juniper_networks	junos_os	>= 22.1 < 22.1R3-S3	22.1R3-S3
juniper_networks	junos_os	>= 22.2 < 22.2R3-S1	22.2R3-S1
juniper_networks	junos_os	>= 22.3 < 22.3R2-S2, 22.3R3	22.3R2-S2, 22.3R3
juniper_networks	junos_os	>= 22.4 < 22.4R2-S1, 22.4R3	22.4R2-S1, 22.4R3

CWE-121