{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-30397",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-30397",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-04-12T15:25:54.567Z",
    "updatedAt": "2024-08-02T01:32:07.245Z",
    "importedAt": "2026-10-24T01:57:11.582Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process",
      "summary": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS).\n\nThe pkid is responsible for the certificate verification. Upon a failed verification, the pkid uses all CPU resources and becomes unresponsive to future verification attempts. This means that all subsequent VPN negotiations depending on certificate verification will fail.\n\nThis CPU utilization of pkid can be checked using this command: \n  root@srx> show system processes extensive | match pkid\n  xxxxx  root  103  0  846M  136M  CPU1  1 569:00 100.00% pkid\n\nThis issue affects:\nJuniper Networks Junos OS\n  *  All versions prior to 20.4R3-S10;\n  *  21.2 versions prior to 21.2R3-S7;\n  *  21.4 versions prior to 21.4R3-S5;\n  *  22.1 versions prior to 22.1R3-S4;\n  *  22.2 versions prior to 22.2R3-S3;\n  *  22.3 versions prior to 22.3R3-S1;\n  *  22.4 versions prior to 22.4R3;\n  *  23.2 versions prior to 23.2R1-S2, 23.2R2.",
      "affected": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "20.4R3-S10"
            },
            {
              "version": "21.2",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "21.2R3-S7"
            },
            {
              "version": "21.4",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "21.4R3-S5"
            },
            {
              "version": "22.1",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "22.1R3-S4"
            },
            {
              "version": "22.2",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "22.2R3-S3"
            },
            {
              "version": "22.3",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "22.3R3-S1"
            },
            {
              "version": "22.4",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "22.4R3"
            },
            {
              "version": "23.2",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "23.2R1-S2, 23.2R2"
            }
          ]
        }
      ]
    }
  }
}