{"id":"CVE-2024-30402","state":"PUBLISHED","title":"Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription","description":"An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).\n\nWhen telemetry requests are sent to the device, and the Dynamic Rendering Daemon (drend) is suspended, the l2ald crashes and restarts due to factors outside the attackers control. Repeated occurrences of these events causes a sustained DoS condition.\n\n\nThis issue affects:\nJunos OS:\n  *  All versions earlier than 20.4R3-S10;\n  *  21.2 versions earlier than 21.2R3-S7;\n  *  21.4 versions earlier than 21.4R3-S5;\n  *  22.1 versions earlier than 22.1R3-S4;\n  *  22.2 versions earlier than 22.2R3-S3;\n  *  22.3 versions earlier than 22.3R3-S1;\n  *  22.4 versions earlier than 22.4R3;\n  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.\n\n\n\nJunos OS Evolved:\n\n  *  All versions earlier than 21.4R3-S5-EVO;\n  *  22.1-EVO versions earlier than 22.1R3-S4-EVO;\n  *  22.2-EVO versions earlier than 22.2R3-S3-EVO;\n  *  22.3-EVO versions earlier than 22.3R3-S1-EVO;\n  *  22.4-EVO versions earlier than 22.4R3-EVO;\n  *  23.2-EVO versions earlier than 23.2R2-EVO.","publishedAt":"2024-04-12T15:27:33.140Z","updatedAt":"2024-08-02T01:32:07.233Z","severity":{"score":8.2,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","source":"juniper"},"assigner":"juniper","products":["Juniper Networks Junos OS","Juniper Networks Junos OS Evolved"],"affected":[{"vendor":"Juniper Networks","product":"Junos OS","defaultStatus":"unaffected","versions":[{"version":"20.4","status":"affected","lessThan":"20.4R3-S10","versionType":"semver"},{"version":"21.2","status":"affected","lessThan":"21.2R3-S7","versionType":"semver"},{"version":"21.4","status":"affected","lessThan":"21.4R3-S5","versionType":"semver"},{"version":"22.1","status":"affected","lessThan":"22.1R3-S4","versionType":"semver"},{"version":"22.2","status":"affected","lessThan":"22.2R3-S3","versionType":"semver"},{"version":"22.3","status":"affected","lessThan":"22.3R3-S1","versionType":"semver"},{"version":"22.4","status":"affected","lessThan":"22.4R3","versionType":"semver"},{"version":"23.2","status":"affected","lessThan":"23.2R1-S2, 23.2R2","versionType":"semver"}]},{"vendor":"Juniper Networks","product":"Junos OS Evolved","defaultStatus":"unaffected","versions":[{"version":"21.4-EVO","status":"affected","lessThan":"21.4R3-S5-EVO","versionType":"semver"},{"version":"22.1-EVO","status":"affected","lessThan":"22.1R3-S4-EVO","versionType":"semver"},{"version":"22.2-EVO","status":"affected","lessThan":"22.2R3-S3-EVO","versionType":"semver"},{"version":"22.3-EVO","status":"affected","lessThan":"22.3R3-S1-EVO","versionType":"semver"},{"version":"22.4-EVO","status":"affected","lessThan":"22.4R3-EVO","versionType":"semver"},{"version":"23.2-EVO","status":"affected","lessThan":"23.2R2-EVO","versionType":"semver"}]}],"references":["https://supportportal.juniper.net/JSA79180","https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L"],"weaknesses":["CWE-754"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/30xxx/CVE-2024-30402.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-30402","state":"PUBLISHED","datePublished":"2024-04-12T15:27:33.140Z","dateUpdated":"2024-08-02T01:32:07.233Z","assignerShortName":"juniper","assignerOrgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","dateReserved":"2024-03-26T23:06:19.981Z"},"containers":{"cna":{"title":"Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription","descriptions":[{"lang":"en","value":"An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).\n\nWhen telemetry requests are sent to the device, and the Dynamic Rendering Daemon (drend) is suspended, the l2ald crashes and restarts due to factors outside the attackers control. Repeated occurrences of these events causes a sustained DoS condition.\n\n\nThis issue affects:\nJunos OS:\n  *  All versions earlier than 20.4R3-S10;\n  *  21.2 versions earlier than 21.2R3-S7;\n  *  21.4 versions earlier than 21.4R3-S5;\n  *  22.1 versions earlier than 22.1R3-S4;\n  *  22.2 versions earlier than 22.2R3-S3;\n  *  22.3 versions earlier than 22.3R3-S1;\n  *  22.4 versions earlier than 22.4R3;\n  *  23.2 versions earlier than 23.2R1-S2, 23.2R2.\n\n\n\nJunos OS Evolved:\n\n  *  All versions earlier than 21.4R3-S5-EVO;\n  *  22.1-EVO versions earlier than 22.1R3-S4-EVO;\n  *  22.2-EVO versions earlier than 22.2R3-S3-EVO;\n  *  22.3-EVO versions earlier than 22.3R3-S1-EVO;\n  *  22.4-EVO versions earlier than 22.4R3-EVO;\n  *  23.2-EVO versions earlier than 23.2R2-EVO."}],"affected":[{"vendor":"Juniper Networks","product":"Junos OS","defaultStatus":"unaffected","versions":[{"version":"20.4","status":"affected","lessThan":"20.4R3-S10","versionType":"semver"},{"version":"21.2","status":"affected","lessThan":"21.2R3-S7","versionType":"semver"},{"version":"21.4","status":"affected","lessThan":"21.4R3-S5","versionType":"semver"},{"version":"22.1","status":"affected","lessThan":"22.1R3-S4","versionType":"semver"},{"version":"22.2","status":"affected","lessThan":"22.2R3-S3","versionType":"semver"},{"version":"22.3","status":"affected","lessThan":"22.3R3-S1","versionType":"semver"},{"version":"22.4","status":"affected","lessThan":"22.4R3","versionType":"semver"},{"version":"23.2","status":"affected","lessThan":"23.2R1-S2, 23.2R2","versionType":"semver"}]},{"vendor":"Juniper Networks","product":"Junos OS Evolved","defaultStatus":"unaffected","versions":[{"version":"21.4-EVO","status":"affected","lessThan":"21.4R3-S5-EVO","versionType":"semver"},{"version":"22.1-EVO","status":"affected","lessThan":"22.1R3-S4-EVO","versionType":"semver"},{"version":"22.2-EVO","status":"affected","lessThan":"22.2R3-S3-EVO","versionType":"semver"},{"version":"22.3-EVO","status":"affected","lessThan":"22.3R3-S1-EVO","versionType":"semver"},{"version":"22.4-EVO","status":"affected","lessThan":"22.4R3-EVO","versionType":"semver"},{"version":"23.2-EVO","status":"affected","lessThan":"23.2R2-EVO","versionType":"semver"}]}],"references":[{"url":"https://supportportal.juniper.net/JSA79180","tags":["vendor-advisory"]},{"url":"https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","tags":["technical-description"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":8.2,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-754","description":"CWE-754 Improper Check for Unusual or Exceptional Conditions","lang":"en","type":"CWE"}]},{"descriptions":[{"description":"Denial of Service (DoS)","lang":"en"}]}],"providerMetadata":{"shortName":"juniper","orgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","dateUpdated":"2024-05-16T20:33:01.059Z"},"datePublic":"2024-04-10T16:00:00.000Z","exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}],"value":"Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The following software releases have been updated to resolve this specific issue: <br>Junos OS Evolved: 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.<br>Junos OS: 20.4R3-S10, 21.2R3-S7, 21.4R3-S5, 22.1R3-S4, 22.2R3-S3, 22.3R3-S1, 22.4R3, 23.2R1-S2, 23.2R2, 23.4R1, and all subsequent releases.<br>"}],"value":"The following software releases have been updated to resolve this specific issue: \nJunos OS Evolved: 21.4R3-S5-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.\nJunos OS: 20.4R3-S10, 21.2R3-S7, 21.4R3-S5, 22.1R3-S4, 22.2R3-S3, 22.3R3-S1, 22.4R3, 23.2R1-S2, 23.2R2, 23.4R1, and all subsequent releases."}],"source":{"advisory":"JSA79180","defect":["1743744"],"discovery":"INTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>There are no known workarounds for this issue.</p>"}],"value":"There are no known workarounds for this issue."}],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-30402","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-12T17:33:10.984122Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-05T17:22:41.040Z"}},{"title":"CVE Program Container","references":[{"url":"https://supportportal.juniper.net/JSA79180","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","tags":["technical-description","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T01:32:07.233Z"}}]}}}