CVE-2024-21606

Summary

CVE-2024-21606 is a Double Free vulnerability impacting the flow processing daemon (flowd) in Juniper Networks Junos OS on SRX Series. An unauthenticated attacker can exploit this issue by sending specific packets in a remote access VPN scenario, leading to a Denial of Service (DoS) due to a flowd crash and restart. Junos OS versions on SRX Series affected by this vulnerability include all versions earlier than 20.4R3-S8, 21.2 versions earlier than 21.2R3-S6, 21.3 versions earlier than 21.3R3-S5, 21.4 versions earlier than 21.4R3-S5, 22.1 versions earlier than 22.1R3-S3, 22.2 versions earlier than 22.2R3-S3, 22.3 versions earlier than 22.3R3-S1, and 22.4 versions earlier than 22.4R2-S2 and 22.4R3.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.