cve/2024/CVE-2024-47506.md
2025-09-29 21:09:30 +02:00

21 lines
1.3 KiB
Markdown

### [CVE-2024-47506](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47506)
![](https://img.shields.io/static/v1?label=Product&message=Junos%20OS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=21.4%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=22.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=22.2%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-833%20Deadlock&color=brightgreen)
### Description
A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).When a large amount of traffic is processed by ATP Cloud inspection, a deadlock can occur which will result in a PFE crash and restart. Whether the crash occurs, depends on system internal timing that is outside the attackers control.This issue affects Junos OS on SRX Series: * All versions before 21.3R3-S1, * 21.4 versions before 21.4R3, * 22.1 versions before 22.1R2, * 22.2 versions before 22.2R1-S2, 22.2R2.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds