CVE-2024-21614

Summary

CVE-2024-21614 is a Denial of Service vulnerability affecting Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated attacker can exploit this Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) by executing a specific query via Dynamic Rendering (DREND) when NETCONF and gRPC are enabled. Repeated execution of this query causes rpd to crash and restart, leading to a sustained Denial of Service condition. Affected versions include Junos OS 22.2 and 22.3, and Junos OS Evolved 22.2 and 22.3. Versions earlier than 22.2R1 for Junos OS and 22.2R1-EVO for Junos OS Evolved are not impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.