CVE-2024-30401
Assigner: juniper
Published: 2024-04-12T15:26:58.419Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: MX Series
EX9200-15C
product: Junos OS
vendor: Juniper Networks
versions: lessThan: 21.2R3-S1
status: affected
version: 21.2
versionType: semver
lessThan: 21.4R3
status: affected
version: 21.4
versionType: semver
lessThan: 22.1R2
status: affected
version: 22.1
versionType: semver
lessThan: 22.2R2
status: affected
version: 22.2
versionType: semver
lessThan: 20.3R1
status: unaffected
version: 0
versionType: semver
status: unaffected
version: 20.4
datePublic: 2024-04-10T16:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on MX Series with MPC10E, MPC11, MX10K-LC9600 line cards, MX304, and EX9200-15C, may allow an attacker to exploit a stack-based buffer overflow, leading to a reboot of the FPC.<br><br>Through code review, it was determined that the interface definition code for aftman could read beyond a buffer boundary, leading to a stack-based buffer overflow.<br><p>This issue affects Junos OS on MX Series and EX9200-15C:<br></p><ul><li>from 21.2 before 21.2R3-S1, </li><li>from 21.4 before 21.4R3, </li><li>from 22.1 before 22.1R2, </li><li>from 22.2 before 22.2R2;&nbsp;</li></ul><p></p><p><span style="background-color: var(--darkreader-bg--wht);">This issue does not affect:</span></p><p></p><ul><li><span style="background-color: var(--darkreader-bg--wht);">versions of Junos OS prior to&nbsp;20.3R1;</span></li><li><span style="background-color: var(--darkreader-bg--wht);">any version of Junos OS 20.4.</span></li></ul>
value: An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on MX Series with MPC10E, MPC11, MX10K-LC9600 line cards, MX304, and EX9200-15C, may allow an attacker to exploit a stack-based buffer overflow, leading to a reboot of the FPC.

Through code review, it was determined that the interface definition code for aftman could read beyond a buffer boundary, leading to a stack-based buffer overflow.
This issue affects Junos OS on MX Series and EX9200-15C:


  *  from 21.2 before 21.2R3-S1, 
  *  from 21.4 before 21.4R3, 
  *  from 22.1 before 22.1R2, 
  *  from 22.2 before 22.2R2; 




This issue does not affect:



  *  versions of Junos OS prior to 20.3R1;
  *  any version of Junos OS 20.4.
exploits: supportingMedia: base64: no
type: text/html
value: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
value: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
cvssV4_0: Automatable: NOT_DEFINED
Recovery: NOT_DEFINED
Safety: NOT_DEFINED
attackComplexity: LOW
attackRequirements: PRESENT
attackVector: NETWORK
baseScore: 8.2
baseSeverity: HIGH
privilegesRequired: NONE
providerUrgency: NOT_DEFINED
subAvailabilityImpact: NONE
subConfidentialityImpact: NONE
subIntegrityImpact: NONE
userInteraction: NONE
valueDensity: NOT_DEFINED
vectorString: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
version: 4.0
vulnAvailabilityImpact: HIGH
vulnConfidentialityImpact: NONE
vulnIntegrityImpact: NONE
vulnerabilityResponseEffort: NOT_DEFINED
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-125
description: CWE-125 Out-of-bounds Read
type: CWE
descriptions: description: Denial of Service (DoS)
solutions: supportingMedia: base64: no
type: text/html
value: The following software releases have been updated to resolve this specific issue:<br><br>Junos OS: 21.2R3-S1, 21.4R3, 22.1R2, 22.2R2, 22.3R1, and all subsequent releases.<br><br>
value: The following software releases have been updated to resolve this specific issue:

Junos OS: 21.2R3-S1, 21.4R3, 22.1R2, 22.2R2, 22.3R1, and all subsequent releases.
source: advisory: JSA79110
defect: 1670609
discovery: INTERNAL
title: Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman
workarounds: supportingMedia: base64: no
type: text/html
value: <p>There are no known workarounds for this issue.</p>
value: There are no known workarounds for this issue.
x_generator: engine: Vulnogram 0.1.0-dev