CVE-2024-21604

Summary

CVE-2024-21604 is a Denial of Service (DoS) vulnerability impacting the kernel of Juniper Networks Junos OS Evolved. An unauthenticated, network-based attacker can trigger the issue by sending a high rate of specific valid packets to the routing engine (RE). This causes the RE to lose connectivity with other components, leading to a complete and persistent system outage. Log messages indicating a table being full and dropping packets are indicative of this issue. Affected versions include all releases before 20.4R3-S7-EVO, as well as specific versions of 21.2R1-EVO, 21.4-EVO, 22.1-EVO, 22.2-EVO, 22.3-EVO, and 22.4-EVO. Carefully designed firewall filters can help prevent this vulnerability from being exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.