Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
f97560ce3c1a0 R14: 0000000000000000 R15: ffff975613ba0a20 FS: 0000000000000000(0000) GS:ffff975d5f780000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8f734ee200 CR3: 0000000103e50000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? die+0x33/0x90 ? do_trap+0xd9/0x100 ? napi_enable+0x3b/0x40 ? do_error_trap+0x83/0xb0 ? napi_enable+0x3b/0x40 ? napi_enable+0x3b/0x40 ? exc_invalid_op+0x4e/0x70 ? napi_enable+0x3b/0x40 ? asm_exc_invalid_op+0x16/0x20 ? napi_enable+0x3b/0x40 ionic_qcq_enable+0xb7/0x180 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_link_status_ch
ff7d10789e3f14643f8] ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_link_status_check+0x11c/0x170 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_lif_deferred_work+0x129/0x280 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] process_one_work+0x145/0x360 worker_thread+0x2bb/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0d19267cb150e8f76ade210e16ee820a77f684e7 - https://git.kernel.org/stable/c/ff9c2a9426ecf5b9631e9fd
t.kernel.org/stable/c/0d19267cb150e8f76ade210e16ee820a77f684e7 - https://git.kernel.org/stable/c/ff9c2a9426ecf5b9631e9fd74993b357262387d6 - https://git.kernel.org/stable/c/8edd18dab443863e9e48f084e7f123fca3065e4e - https://git.kernel.org/stable/c/60cd714871cd5a683353a355cbb17a685245cf84 - https://git.kernel.org/stable/c/183ebc167a8a19e916b885d4bb61a3491991bfa5 - https://git.kernel.org/stable/c/a87d72b37b9ec2c1e18fe36b09241d8b30334a2e - https://git.kernel.org/stable/c/79f18a41dd056115d685f3b0a419c7cd40055e13
CVE ID: CVE-2024-39503 State: PUBLISHED Published: 2024-07-12T12:20:36.299Z Last Updated: 2025-11-03T21:56:23.434Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and the garbage collection of the list:set type. The namespace cleanup can destroy the list:set type of sets while the gc of the set type is waiting to run in rcu cleanup. The latter uses data from the destroyed set which thus leads use after free. The patch contains the following parts: - When destro
uses data from the destroyed set which thus leads use after free. The patch contains the following parts: - When destroying all sets, first remove the garbage collectors, then wait if needed and then destroy the sets. - Fix the badly ordered "wait then remove gc" for the destroy a single set case. - Fix the missing rcu locking in the list:set type in the userspace test case. - Use proper RCU list handlings in the list:set type. The patch depends on c1193d9bbbd3 (netfilter: ipset: Add list flush to cancel_gc). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3 - https://git.kernel.
lnrichment: References: - https://git.kernel.org/stable/c/c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3 - https://git.kernel.org/stable/c/93b53c202b51a69e42ca57f5a183f7e008e19f83 - https://git.kernel.org/stable/c/0f1bb77c6d837c9513943bc7c08f04c5cc5c6568 - https://git.kernel.org/stable/c/390b353d1a1da3e9c6c0fd14fe650d69063c95d6 - https://git.kernel.org/stable/c/2ba35b37f780c6410bb4bba9c3072596d8576702 - https://git.kernel.org/stable/c/90ae20d47de602198eb69e6cd7a3db3420abfc08 - https://git.kernel.org/stable/c/4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10
CVE ID: CVE-2024-39504 State: PUBLISHED Published: 2024-07-12T12:20:36.964Z Last Updated: 2025-05-04T09:17:13.442Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and payload Check for mandatory netlink attributes in payload and meta expression when used embedded from the inner expression, otherwise NULL pointer dereference is possible from userspace. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b30669fdea0ca03aa22995e6c99f7e7d9dee89ff - https://git.kernel.org/stable/c/39323f54cad29602917848346c71b087da92a19
ble/c/b30669fdea0ca03aa22995e6c99f7e7d9dee89ff - https://git.kernel.org/stable/c/39323f54cad29602917848346c71b087da92a19d - https://git.kernel.org/stable/c/c4ab9da85b9df3692f861512fe6c9812f38b7471
CVE ID: CVE-2024-39505 State: PUBLISHED Published: 2024-07-12T12:20:37.633Z Last Updated: 2025-11-03T21:56:24.931Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0674ed1e58e2fdcc155e7d944f8aad007a94ac69 - https://git.kernel.org/stable/c/bda7cdaeebf57e46c1a488ae7a15f6f264691f59 - https://git.kernel.org/stable/c/86042e3d16b7e0686db835
it.kernel.org/stable/c/bda7cdaeebf57e46c1a488ae7a15f6f264691f59 - https://git.kernel.org/stable/c/86042e3d16b7e0686db835c9e7af0f9044dd3a56 - https://git.kernel.org/stable/c/3b1cf943b029c147bfacfd53dc28ffa632c0a622 - https://git.kernel.org/stable/c/9460961d82134ceda7377b77a3e3e3531b625dfe - https://git.kernel.org/stable/c/99392c98b9be0523fe76944b2264b1847512ad23 - https://git.kernel.org/stable/c/b880018edd3a577e50366338194dee9b899947e0
CVE ID: CVE-2024-39506 State: PUBLISHED Published: 2024-07-12T12:20:38.298Z Last Updated: 2025-11-03T21:56:26.420Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_vf_rep_copy_packet() pg_info->page is compared to a NULL value, but then it is unconditionally passed to skb_add_rx_frag() which looks strange and could lead to null pointer dereference. lio_vf_rep_copy_packet() call trace looks like: octeon_droq_process_packets octeon_droq_fast_process_packets octeon_droq_dispatch_pkt octeon_create_recv_info ...search in the dispatch_list... ->disp_fn(rdisp
_fast_process_packets octeon_droq_dispatch_pkt octeon_create_recv_info ...search in the dispatch_list... ->disp_fn(rdisp->rinfo, ...) lio_vf_rep_pkt_recv(struct octeon_recv_info *recv_info, ...) In this path there is no code which sets pg_info->page to NULL. So this check looks unneeded and doesn't solve potential problem. But I guess the author had reason to add a check and I have no such card and can't do real test. In addition, the code in the function liquidio_push_packet() in liquidio/lio_core.c does exactly the same. Based on this, I consider the most acceptable compromise solution to adjust this issue by moving skb_add_rx_frag() into conditional scope. Found by Linux Verification Cent
omise solution to adjust this issue by moving skb_add_rx_frag() into conditional scope. Found by Linux Verification Center (linuxtesting.org) with SVACE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/87d6bdc006f0cbf297a3b2ad6e40ede4c3ee5dc2 - https://git.kernel.org/stable/c/dcc7440f32c7a26b067aff6e7d931ec593024a79 - https://git.kernel.org/stable/c/cbf18d8128a753cb632bef39470d19befd9c7347 - https://git.kernel.org/stable/c/a86490a3712cc513113440a606a0e77130abd47c - https://git.kernel.org/stable/c/f1ab15a09492a5ae8ab1e2c35ba2cf9e150d25ee - https://git.kernel.org/stable/c/fd2b613bc4c508e55c1221c6595bb889812a4fea - https:
15a09492a5ae8ab1e2c35ba2cf9e150d25ee - https://git.kernel.org/stable/c/fd2b613bc4c508e55c1221c6595bb889812a4fea - https://git.kernel.org/stable/c/a6f4d0ec170a46b5f453cacf55dff5989b42bbfa - https://git.kernel.org/stable/c/c44711b78608c98a3e6b49ce91678cd0917d5349
CVE ID: CVE-2024-39507 State: PUBLISHED Published: 2024-07-12T12:20:38.954Z Last Updated: 2025-11-03T21:56:27.927Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may uninit, then cause kernel crash. To fix the problem, when link status change, need to check whether the roce registered, and when uninit, need to wait link update finish. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org
finish. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/62b5dfb67bfa8bd0301bf3442004563495f9ee48 - https://git.kernel.org/stable/c/6d0007f7b69d684879a0f598a042e40244d3cf63 - https://git.kernel.org/stable/c/689de7c3bfc7d47e0eacc641c4ce4a0f579aeefa - https://git.kernel.org/stable/c/b2c5024b771cd1dd8175d5f6949accfadbab7edd - https://git.kernel.org/stable/c/12cda920212a49fa22d9e8b9492ac4ea013310a4
CVE ID: CVE-2024-39508 State: PUBLISHED Published: 2024-07-12T12:20:39.607Z Last Updated: 2025-05-04T09:17:18.899Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_bit() on worker->flags within io_uring/io-wq to address potential data races. The structure io_worker->flags may be accessed through various data paths, leading to concurrency issues. When KCSAN is enabled, it reveals data races occurring in io_worker_handle_work and io_wq_activate_free_worker functions. BUG: KCSAN: data-race in io_worker_handle_work / io_wq_activate_free_worker wr
and io_wq_activate_free_worker functions. BUG: KCSAN: data-race in io_worker_handle_work / io_wq_activate_free_worker write to 0xffff8885c4246404 of 4 bytes by task 49071 on cpu 28: io_worker_handle_work (io_uring/io-wq.c:434 io_uring/io-wq.c:569) io_wq_worker (io_uring/io-wq.c:?) <snip> read to 0xffff8885c4246404 of 4 bytes by task 49024 on cpu 5: io_wq_activate_free_worker (io_uring/io-wq.c:? io_uring/io-wq.c:285) io_wq_enqueue (io_uring/io-wq.c:947) io_queue_iowq (io_uring/io_uring.c:524) io_req_task_submit (io_uring/io_uring.c:1511) io_handle_tw_list (io_uring/io_uring.c:1198) <snip> Line numbers against commit 18daea77cca6 ("Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm
c:1198) <snip> Line numbers against commit 18daea77cca6 ("Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm"). These races involve writes and reads to the same memory location by different tasks running on different CPUs. To mitigate this, refactor the code to use atomic operations such as set_bit(), test_bit(), and clear_bit() instead of basic "and" and "or" operations. This ensures thread-safe manipulation of worker flags. Also, move `create_index` to avoid holes in the structure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/ab702c3483db9046bab9f40306f1a28b22dbbdc0 - https://git.kernel.org/stable/
References: - https://git.kernel.org/stable/c/ab702c3483db9046bab9f40306f1a28b22dbbdc0 - https://git.kernel.org/stable/c/1cbb0affb15470a9621267fe0a8568007553a4bf - https://git.kernel.org/stable/c/8a565304927fbd28c9f028c492b5c1714002cbab
CVE ID: CVE-2024-39509 State: PUBLISHED Published: 2024-07-12T12:20:40.257Z Last Updated: 2025-11-03T21:56:29.387Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report. Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value &= m; ... WARN_ON may be considered superfluous. Remove it to suppress future syzkaller triggers. [1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-cor
dered superfluous. Remove it to suppress future syzkaller triggers. [1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [
x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [inline] usbhid_submit_report+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddev_ioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/955b3764671f3f157215194972d9c01a3a4bd316 - https://git.kernel.o
nrichment: References: - https://git.kernel.org/stable/c/955b3764671f3f157215194972d9c01a3a4bd316 - https://git.kernel.org/stable/c/f9db5fbeffb951cac3f0fb1c2eeffb79785399ca - https://git.kernel.org/stable/c/33f6832798dd3297317901cc1db556ac3ae80c24 - https://git.kernel.org/stable/c/8bac61934cd563b073cd30b8cf6d5c758ab5ab26 - https://git.kernel.org/stable/c/bfd546fc7fd76076f81bf41b85b51ceda30949fd - https://git.kernel.org/stable/c/30f76bc468b9b2cbbd5d3eb482661e3e4798893f - https://git.kernel.org/stable/c/655c6de2f215b61d0708db6b06305eee9bbfeba2 - https://git.kernel.org/stable/c/4aa2dcfbad538adf7becd0034a3754e1bd01b2b5
CVE ID: CVE-2024-39510 State: PUBLISHED Published: 2024-07-12T12:20:40.901Z Last Updated: 2025-11-03T21:56:30.908Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN: slab-use-after-free in cachefiles_ondemand_daemon_read+0xb41/0xb60 Read of size 8 at addr ffff888122e84088 by task ondemand-04-dae/963 CPU: 13 PID: 963 Comm: ondemand-04-dae Not tainted 6.8.0-dirty #564 Call Trace: kasan_report+0x93/0xc0
emand-04-dae/963 CPU: 13 PID: 963 Comm: ondemand-04-dae Not tainted 6.8.0-dirty #564 Call Trace: kasan_report+0x93/0xc0 cachefiles_ondemand_daemon_read+0xb41/0xb60 vfs_read+0x169/0xb50 ksys_read+0xf5/0x1e0 Allocated by task 116: kmem_cache_alloc+0x140/0x3a0 cachefiles_lookup_cookie+0x140/0xcd0 fscache_cookie_state_machine+0x43c/0x1230 [...] Freed by task 792: kmem_cache_free+0xfe/0x390 cachefiles_put_object+0x241/0x480 fscache_cookie_state_machine+0x5c8/0x1230 [...] ================================================================== Following is the process that triggers the issue: mount | daemon_thread1 | daemon_thread2 ------------------------------------------------------------ cachefiles_
issue: mount | daemon_thread1 | daemon_thread2 ------------------------------------------------------------ cachefiles_withdraw_cookie cachefiles_ondemand_clean_object(object) cachefiles_ondemand_send_req REQ_A = kzalloc(sizeof(*req) + data_len) wait_for_completion(&REQ_A->done) cachefiles_daemon_read cachefiles_ondemand_daemon_read REQ_A = cachefiles_ondemand_select_req msg->object_id = req->object->ondemand->ondemand_id ------ restore ------ cachefiles_ondemand_restore xas_for_each(&xas, req, ULONG_MAX) xas_set_mark(&xas, CACHEFILES_REQ_NEW) cachefiles_daemon_read cachefiles_ondemand_daemon_read REQ_A = cachefiles_ondemand_select_req copy_to_user(_buffer, msg, n) xa_erase(&cache->reqs, id
iles_ondemand_daemon_read REQ_A = cachefiles_ondemand_select_req copy_to_user(_buffer, msg, n) xa_erase(&cache->reqs, id) complete(&REQ_A->done) ------ close(fd) ------ cachefiles_ondemand_fd_release cachefiles_put_object cachefiles_put_object kmem_cache_free(cachefiles_object_jar, object) REQ_A->object->ondemand->ondemand_id // object UAF !!! When we see the request within xa_lock, req->object must not have been freed yet, so grab the reference count of object before xa_unlock to avoid the above issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/cb55625f8eb9d2de8be4da0c4580d48cbb32058e - https://git.kernel.org/sta
ent: References: - https://git.kernel.org/stable/c/cb55625f8eb9d2de8be4da0c4580d48cbb32058e - https://git.kernel.org/stable/c/3958679c49152391209b32be3357193300a51abd - https://git.kernel.org/stable/c/93064676a2820420a2d37d7c8289f277fe20793d - https://git.kernel.org/stable/c/da4a827416066191aafeeccee50a8836a826ba10
CVE ID: CVE-2024-39511 State: PUBLISHED Published: 2024-07-10T22:58:06.058Z Last Updated: 2024-08-02T04:26:15.455Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to the CLI to cause a Denial of Service (DoS). On running a specific operational dot1x command, the dot1x daemon crashes. An attacker can cause a sustained DoS condition by running this command repeatedly. When the crash occurs, the authentication status of any 80
a sustained DoS condition by running this command repeatedly. When the crash occurs, the authentication status of any 802.1x clients is cleared, and any authorized dot1x port becomes unauthorized. The client cannot re-authenticate until the dot1x daemon restarts. This issue affects Junos OS: * All versions before 20.4R3-S10; * 21.2 versions before 21.2R3-S7; * 21.4 versions before 21.4R3-S6; * 22.1 versions before 22.1R3-S5; * 22.2 versions before 22.2R3-S3; * 22.3 versions before 22.3R3-S2; * 22.4 versions before 22.4R3-S1; * 23.2 versions before 23.2R2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportportal.juniper.net/JSA82976
CVE ID: CVE-2024-39512 State: PUBLISHED Published: 2024-07-10T23:02:05.458Z Last Updated: 2024-08-02T04:26:15.874Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Evolved Problem Types: CWE-1263 Description: An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a malicious attacker with physical access to the console to resume a previous session and possibly gain administrative privileges.
s attacker with physical access to the console to resume a previous session and possibly gain administrative privileges. This issue affects Junos OS Evolved: * from 23.2R2-EVO before 23.2R2-S1-EVO, * from 23.4R1-EVO before 23.4R2-EVO. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportportal.juniper.net/JSA82977
CVE ID: CVE-2024-39513 State: PUBLISHED Published: 2024-07-10T23:03:46.446Z Last Updated: 2024-08-02T04:26:15.477Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Evolved Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service (DoS). When a specific "clear" command is run, the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) crashes and restarts. The crash impacts all traffic going through the FPCs, causing a DoS. Running the command repe
-zx) crashes and restarts. The crash impacts all traffic going through the FPCs, causing a DoS. Running the command repeatedly leads to a sustained DoS condition. This issue affects Junos OS Evolved: * All versions before 20.4R3-S9-EVO, * from 21.2-EVO before 21.2R3-S7-EVO, * from 21.3-EVO before 21.3R3-S5-EVO, * from 21.4-EVO before 21.4R3-S6-EVO, * from 22.1-EVO before 22.1R3-S4-EVO, * from 22.2-EVO before 22.2R3-S3-EVO, * from 22.3-EVO before 22.3R3-S3-EVO, * from 22.4-EVO before 22.4R3-EVO, * from 23.2-EVO before 23.2R2-EVO. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportportal.juniper.net/JSA82978
CVE ID: CVE-2024-39514 State: PUBLISHED Published: 2024-07-10T23:05:27.050Z Last Updated: 2024-08-02T04:26:15.815Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS, Junos OS Evolved Problem Types: CWE-703 Description: An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). An attacker can send specific traffic to the device, which causes the rpd to crash and restart. Continued receipt of this traffic will result in a sustained DoS condition. This i
causes the rpd to crash and restart. Continued receipt of this traffic will result in a sustained DoS condition. This issue only affects devices with an EVPN-VPWS instance with IGMP-snooping enabled. This issue affects Junos OS: * All versions before 20.4R3-S10, * from 21.4 before 21.4R3-S6, * from 22.1 before 22.1R3-S5, * from 22.2 before 22.2R3-S3, * from 22.3 before 22.3R3-S2, * from 22.4 before 22.4R3, * from 23.2 before 23.2R2; Junos OS Evolved: * All versions before 20.4R3-S10-EVO, * from 21.4-EVO before 21.4R3-S6-EVO, * from 22.1-EVO before 22.1R3-S5-EVO, * from 22.2-EVO before 22.2R3-S3-EVO, * from 22.3-EVO before 22.3R3-S2-EVO, * from 22.4-EVO before 22.4R3-EVO, * from 23.2-EVO bef
2-EVO before 22.2R3-S3-EVO, * from 22.3-EVO before 22.3R3-S2-EVO, * from 22.4-EVO before 22.4R3-EVO, * from 23.2-EVO before 23.2R2-EVO. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportportal.juniper.net/JSA82980
CVE ID: CVE-2024-39515 State: PUBLISHED Published: 2024-10-09T20:00:39.888Z Last Updated: 2024-10-11T15:12:59.546Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS, Junos OS Evolved Problem Types: CWE-1288 Description: An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS