CVE-2024-39539

MEDIUM EPSS 12.0%
Published Jul 11, 20241y ago · Modified Jun 17, 20261w ago
6.0 CVSS 4.0
Medium
Find Similar
Published Jul 11, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). In a subscriber management scenario continuous subscriber logins will trigger a memory leak and eventually lead to an FPC crash and restart. This issue affects Junos OS on MX Series: * All version before 21.2R3-S6, * 21.4 versions before 21.4R3-S6, * 22.1 versions before 22.1R3-S5, * 22.2 versions before 22.2R3-S3,  * 22.3 versions before 22.3R3-S2, * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R2.

CVSS Details

Base Score
6.0
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
12.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-401

Affected Products 89

VendorProductVersionRange
juniperjunos* <21.2
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.2any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos21.4any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.1any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.2any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.3any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
junipermx*any
junipermx10*any
junipermx10000*any
junipermx10003*any
junipermx10004*any
junipermx10008*any
junipermx10016*any
junipermx104*any
junipermx150*any
junipermx2008*any
junipermx2010*any
junipermx2020*any
junipermx204*any
junipermx240*any
junipermx304*any
junipermx40*any
junipermx480*any
junipermx5*any
junipermx80*any
junipermx960*any

References 1

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.