SB2024041109 - Exposure of resource to wrong sphere in Juniper Junos OS
Published: April 11, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Exposure of resource to wrong sphere (CVE-ID: CVE-2024-21605)
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to exposure of resource to wrong sphere error in the Packet Forwarding Engine (PFE). A remote non-authenticated attacker can cause a Denial of Service (DoS).
Specific valid link-local traffic is not blocked on ports in STP blocked state but is instead sent to the control plane of the device.
This leads to excessive resource consumption and in turn severe impact on all control and management protocols of the device.
Remediation
Install update from vendor's website.