SB2024041117 - Improper handling of exceptional conditions in Juniper Junos OS

Security Bulletin ID SB2024041117

Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2024-21610)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper handling of exceptional conditions error in the Class of Service daemon (cosd). A remote non-authenticated attacker can cause a limited Denial of Service (DoS).

In a scaled subscriber scenario when specific low privileged commands, received over NETCONF, SSH or telnet, are handled by cosd on behalf of mgd, the respective child management daemon (mgd) processes will get stuck.

In case of (Netconf over) SSH this leads to stuck SSH sessions, so that when the connection-limit for SSH is reached new sessions can't be established anymore.

Remediation

Install update from vendor's website.

References

https://supportportal.juniper.net/s/article/2024-04-Security-Bulletin-Junos-OS-MX-Series-In-a-scaled-subscriber-scenario-if-CoS-information-is-gathered-mgd-processes-gets-stuck-CVE-2024-21610