VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Oct 11, 2024· Updated Jun 17, 2026

CVE-2024-47506

CVE-2024-47506

Description

A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

When a large amount of traffic is processed by ATP Cloud inspection, a deadlock can occur which will result in a PFE crash and restart. Whether the crash occurs, depends on system internal timing that is outside the attackers control.

This issue affects Junos OS on SRX Series:

  • All versions before 21.3R3-S1,
  • 21.4 versions before 21.4R3,
  • 22.1 versions before 22.1R2,
  • 22.2 versions before 22.2R1-S2, 22.2R2.

Affected products

26
  • Juniper Networks/Junos26 versions
    cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*+ 25 more
    • cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*range: <21.3
    • cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
    • (no CPE)range: <21.3R3-S1, <21.4R3, <22.1R2, <22.2R1-S2, <22.2R2
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.