VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026

CVE-2024-21611

CVE-2024-21611

Description

A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

In a Juniper Flow Monitoring (jflow) scenario route churn that causes BGP next hops to be updated will cause a slow memory leak and eventually a crash and restart of rpd.

Thread level memory utilization for the areas where the leak occurs can be checked using the below command:

user@host> show task memory detail | match so_in so_in6 28 32 344450 11022400 344760 11032320 so_in 8 16 1841629 29466064 1841734 29467744 This issue affects:

Junos OS

  • 21.4 versions earlier than 21.4R3;
  • 22.1 versions earlier than 22.1R3;
  • 22.2 versions earlier than 22.2R3.

Junos OS Evolved

  • 21.4-EVO versions earlier than 21.4R3-EVO;
  • 22.1-EVO versions earlier than 22.1R3-EVO;
  • 22.2-EVO versions earlier than 22.2R3-EVO.

This issue does not affect:

Juniper Networks Junos OS versions earlier than 21.4R1.

Juniper Networks Junos OS Evolved versions earlier than 21.4R1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

43
  • Juniper Networks/Junos22 versions
    cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*+ 21 more
    • cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
    • (no CPE)range: versions earlier than 21.4R3, 22.1R3, 22.2R3
  • Juniper Networks/OS Evolved21 versions
    cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*+ 20 more
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:21.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.1:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.1:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.1:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos_os_evolved:22.2:r2:*:*:*:*:*:*
    • (no CPE)range: versions earlier than 21.4R3-EVO, 22.1R3-EVO, 22.2R3-EVO
    • (no CPE)range: 21.4-EVO

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.