CVE-2024-21616

Summary

CVE-2024-21616 is a Denial of Service (DoS) vulnerability affecting Juniper Networks Junos OS on MX Series and SRX Series. This issue arises due to an Improper Validation of Syntactic Correctness of Input in the Packet Forwarding Engine (PFE). When SIP ALG is enabled and a particular SIP packet is processed, NAT IP allocation fails for legitimate traffic, resulting in a sustained DoS condition. The affected versions include all releases prior to 21.2R3-S6, 21.3R3-S5, 21.4R3-S5, 21.4R3, 22.1R3-S4, 22.2R3-S3, 22.3R3-S1, 22.4R2-S2, 22.4R3, and 23.2R1-S1, 23.2R2. To monitor NAT IP usage, users can run the 'show security nat resource-usage source-pool <source_pool_name>' command.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.