cvelist/2024/39xxx/CVE-2024-39553.json

{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2024-39553",
        "ASSIGNER": "sirt@juniper.net",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "An Exposure of Resource to Wrong Sphere vulnerability in the sampling service\u00a0of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to send arbitrary data to the device, which leads msvcsd process to crash with limited availability impacting Denial of Service (DoS) and allows unauthorized network access to the device, potentially impacting system integrity.\n\nThis issue only happens when inline jflow is configured.\n\nThis does not impact any forwarding traffic. The impacted services MSVCS-DB app crashes momentarily and recovers by itself.\u00a0\n\nThis issue affects Juniper Networks Junos OS Evolved:\u00a0\n  *  21.4 versions earlier than 21.4R3-S7-EVO;\u00a0\n  *  22.2 versions earlier than\u00a022.2R3-S3-EVO;\n  *  22.3 versions earlier than 22.3R3-S2-EVO;\n  *  22.4 versions earlier than 22.4R3-EVO;\n  *  23.2 versions earlier than 23.2R1-S2-EVO, 23.2R2-EVO."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-668: Exposure of Resource to Wrong Sphere",
                        "cweId": "CWE-668"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Juniper Networks",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Junos OS Evolved",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "<",
                                            "version_name": "21.4-EVO",
                                            "version_value": "21.4R3-S7-EVO"
                                        },
                                        {
                                            "version_affected": "<",
                                            "version_name": "22.2-EVO",
                                            "version_value": "22.2R3-S3-EVO"
                                        },
                                        {
                                            "version_affected": "<",
                                            "version_name": "22.3-EVO",
                                            "version_value": "22.3R3-S2-EVO"
                                        },
                                        {
                                            "version_affected": "<",
                                            "version_name": "22.4-EVO",
                                            "version_value": "22.4R3-EVO"
                                        },
                                        {
                                            "version_affected": "<",
                                            "version_name": "23.2-EVO",
                                            "version_value": "23.2R1-S2-EVO, 23.2R2-EVO"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://supportportal.juniper.net/JSA79101",
                "refsource": "MISC",
                "name": "https://supportportal.juniper.net/JSA79101"
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.1.0-av217"
    },
    "source": {
        "advisory": "JSA79101",
        "defect": [
            "1763417"
        ],
        "discovery": "USER"
    },
    "configuration": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "This issue only happens when inline jflow is configured:<br><br><tt>\u2003[ services flow-monitoring (version-ipfix|version9) ]<br><span style=\"background-color: rgb(239, 250, 102);\"><br></span><span style=\"background-color: var(--wht);\">\u2003[ forwarding-options sampling instance 1 input rate 33333]<br></span><span style=\"background-color: var(--wht);\">\u2003[ forwarding-options sampling instance 1 family inet output flow-server x.x.x.x port 9991]<br></span><span style=\"background-color: var(--wht);\">\u2003[ forwarding-options sampling instance 1 family inet output flow-server x.x.x.x version9 template 1]<br></span><span style=\"background-color: var(--wht);\">\u2003[ forwarding-options sampling instance 1 family inet output inline-jflow\nsource-address y.y.y.y]</span></tt><span style=\"background-color: var(--wht);\"><br></span><br>"
                }
            ],
            "value": "This issue only happens when inline jflow is configured:\n\n\u2003[ services flow-monitoring (version-ipfix|version9) ]\n\n\u2003[ forwarding-options sampling instance 1 input rate 33333]\n\u2003[ forwarding-options sampling instance 1 family inet output flow-server x.x.x.x port 9991]\n\u2003[ forwarding-options sampling instance 1 family inet output flow-server x.x.x.x version9 template 1]\n\u2003[ forwarding-options sampling instance 1 family inet output inline-jflow\nsource-address y.y.y.y]"
        }
    ],
    "work_around": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "There are no known workarounds for this issue."
                }
            ],
            "value": "There are no known workarounds for this issue."
        }
    ],
    "exploit": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "<p>Juniper SIRT is not aware of any malicious exploitation of this vulnerability.</p>"
                }
            ],
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
    ],
    "solution": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "<p>The following software releases have been updated to resolve this specific issue:&nbsp;</p><p>Junos OS Evolved: 21.4R3-S7-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-EVO, 23.2R1-S2-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.</p>"
                }
            ],
            "value": "The following software releases have been updated to resolve this specific issue:\u00a0\n\nJunos OS Evolved: 21.4R3-S7-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-EVO, 23.2R1-S2-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases."
        }
    ],
    "impact": {
        "cvss": [
            {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
                "version": "3.1"
            }
        ]
    }
}