{
  "id": "CVE-2024-30394",
  "sourceIdentifier": "sirt@juniper.net",
  "published": "2024-04-12T15:15:24.730",
  "lastModified": "2024-04-12T15:15:24.730",
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "A\u00a0Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an rpd crash, leading to Denial of Service (DoS).\n\nOn all Junos OS and Junos OS Evolved platforms, when EVPN is configured, and a specific EVPN type-5 route is received via BGP, rpd crashes and restarts. Continuous receipt of this specific route will lead to a sustained Denial of Service (DoS) condition.\n\nThis issue affects:\nJunos OS:\n\n\n\n  *  all versions before 21.2R3-S7,\n\n  *  from 21.4 before 21.4R3-S5,\n\n  *  from 22.1 before 22.1R3-S4,\n\n  *  from 22.2 before 22.2R3-S2,\n\n  *  from 22.3 before 22.3R3-S1,\n\n  *  from 22.4 before 22.4R3,\n\n  *  from 23.2 before 23.2R2.\n\n\n\n\n\nJunos OS Evolved:\n\n\n\n  *  all versions before 21.4R3-S5-EVO,\n\n  *  from 22.1-EVO before 22.1R3-S4-EVO,\n\n  *  from 22.2-EVO before 22.2R3-S2-EVO,\n\n  *  from 22.3-EVO before 22.3R3-S1-EVO,\n\n  *  from 22.4-EVO before 22.4R3-EVO,\n\n  *  from 23.2-EVO before 23.2R2-EVO.\n\n\n\n\n\n"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "sirt@juniper.net",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "sirt@juniper.net",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-121"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://supportportal.juniper.net/JSA79094",
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
      "source": "sirt@juniper.net"
    }
  ]
}