{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2024-21598", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-21598", "idYear": 2024, "status": "PUBLISHED", "publishedAt": "2024-04-12T14:54:23.761Z", "updatedAt": "2024-08-01T22:27:36.007Z", "importedAt": "2026-10-24T01:57:07.518Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash", "summary": "An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).\n\nIf a BGP update is received over an established BGP session which contains a tunnel encapsulation attribute with a specifically malformed TLV, rpd will crash and restart.\n\nThis issue affects Juniper Networks\nJunos OS:\n * 20.4 versions 20.4R1 and later versions earlier than 20.4R3-S9;\n * 21.2 versions earlier than 21.2R3-S7;\n * 21.3 versions earlier than 21.3R3-S5;\n * 21.4 versions earlier than 21.4R3-S5;\n * 22.1 versions earlier than 22.1R3-S4;\n * 22.2 versions earlier than 22.2R3-S3;\n * 22.3 versions earlier than 22.3R3-S1;\n * 22.4 versions earlier than 22.4R3;\n * 23.2 versions earlier than 23.2R1-S2, 23.2R2;\n\n\n\nJunos OS Evolved:\n * 20.4-EVO versions 20.4R1-EVO and later versions earlier than 20.4R3-S9-EVO;\n * 21.2-EVO versions earlier than 21.2R3-S7-EVO;\n * 21.3-EVO versions earlier than 21.3R3-S5-EVO;\n * 21.4-EVO versions earlier than 21.4R3-S5-EVO;\n * 22.1-EVO versions earlier than 22.1R3-S4-EVO;\n * 22.2-EVO versions earlier than 22.2R3-S3-EVO;\n * 22.3-EVO versions earlier than 22.3R3-S1-EVO;\n * 22.4-EVO versions earlier than 22.4R3-EVO;\n * 23.2-EVO versions earlier than 23.2R1-S2-EVO, 23.2R2-EVO;\n\n\n\nThis issue does not affect Juniper Networks\n * Junos OS versions earlier than 20.4R1;\n * Junos OS Evolved versions earlier than 20.4R1-EVO.\n\n\n\nThis is a related but separate issue than the one described in JSA79095.", "affected": [ { "vendor": "Juniper Networks", "product": "Junos OS", "defaultStatus": "unaffected", "versions": [ { "version": "20.4", "status": "affected", "versionType": "semver", "lessThan": "20.4R3-S9" }, { "version": "21.2", "status": "affected", "versionType": "semver", "lessThan": "21.2R3-S7" }, { "version": "21.3", "status": "affected", "versionType": "semver", "lessThan": "21.3R3-S5" }, { "version": "21.4", "status": "affected", "versionType": "semver", "lessThan": "21.4R3-S5" }, { "version": "22.1", "status": "affected", "versionType": "semver", "lessThan": "22.1R3-S4" }, { "version": "22.2", "status": "affected", "versionType": "semver", "lessThan": "22.2R3-S3" }, { "version": "22.3", "status": "affected", "versionType": "semver", "lessThan": "22.3R3-S1" }, { "version": "22.4", "status": "affected", "versionType": "semver", "lessThan": "22.4R3" }, { "version": "23.2", "status": "affected", "versionType": "semver", "lessThan": "23.2R1-S2, 23.2R2" } ] }, { "vendor": "Juniper Networks", "product": "Junos OS Evolved", "defaultStatus": "unaffected", "versions": [ { "version": "20.4-EVO", "status": "affected", "versionType": "semver", "lessThan": "20.4R3-S9-EVO" }, { "version": "21.2-EVO", "status": "affected", "versionType": "semver", "lessThan": "21.2R3-S7-EVO" }, { "version": "21.3-EVO", "status": "affected", "versionType": "semver", "lessThan": "21.3R3-S5-EVO" }, { "version": "21.4-EVO", "status": "affected", "versionType": "semver", "lessThan": "21.4R3-S5-EVO" }, { "version": "22.1-EVO", "status": "affected", "versionType": "semver", "lessThan": "22.1R3-S4-EVO" }, { "version": "22.2-EVO", "status": "affected", "versionType": "semver", "lessThan": "22.2R3-S3-EVO" }, { "version": "22.3-EVO", "status": "affected", "versionType": "semver", "lessThan": "22.3R3-S1-EVO" }, { "version": "22.4-EVO", "status": "affected", "versionType": "semver", "lessThan": "22.4R3-EVO" }, { "version": "23.2-EVO", "status": "affected", "versionType": "semver", "lessThan": "23.2R1-S2-EVO, 23.2R2-EVO" } ] } ] } } }