CVE-2024-21590

Summary

CVE-2024-21590 is a Denial of Service (DoS) vulnerability affecting Juniper Networks Junos OS Evolved. An unauthenticated attacker within the Multi-Protocol Label Switching (MPLS) administrative domain can exploit this Improper Input Validation issue in Juniper Tunnel Driver (jtd) and ICMP module. The vulnerability arises when the Packet Forwarding Engine (PFE) internally forwards specifically crafted transit MPLS IPv4 packets to the Routing Engine (RE), leading to a sustained DoS condition. Versions of Junos OS affected include all versions before 21.2R3-S8-EVO, from 21.4-EVO before 21.4R3-S6-EVO, from 22.2-EVO before 22.2R3-S4-EVO, from 22.3-EVO before 22.3R3-S3-EVO, from 22.4-EVO before 22.4R3-EVO, from 23.2-EVO before 23.2R2-EVO, and from 23.4-EVO before 23.4R1-S1-EVO.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.