CVE-2024-39551

Summary

An Uncontrolled Resource Consumption vulnerability in the H.323 ALG (Application Layer Gateway) of  Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC, allows an unauthenticated network-based attacker to send specific packets causing traffic loss leading to Denial of Service (DoS). 

Continued receipt and processing of these specific packets will sustain the Denial of Service condition.

The memory usage can be monitored using the below command.

  user@host> show usp memory segment sha data objcache jsf  This issue affects SRX Series and MX Series with SPC3 and MS-MPC/MIC: 

  •  20.4 before 20.4R3-S10, 
  •  21.2 before 21.2R3-S6, 
  •  21.3 before 21.3R3-S5, 
  •  21.4 before 21.4R3-S6, 
  •  22.1 before 22.1R3-S4, 
  •  22.2 before 22.2R3-S2, 
  •  22.3 before 22.3R3-S1, 
  •  22.4 before 22.4R3, 
  •  23.2 before 23.2R2.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS20.4 < 20.4R3-S10affected
Juniper NetworksJunos OS21.2 < 21.2R3-S6affected
Juniper NetworksJunos OS21.3 < 21.3R3-S5affected
Juniper NetworksJunos OS21.4 < 21.4R3-S6affected
Juniper NetworksJunos OS22.1 < 22.1R3-S4affected
Juniper NetworksJunos OS22.2 < 22.2R3-S2affected
Juniper NetworksJunos OS22.3 < 22.3R3-S1affected
Juniper NetworksJunos OS22.4 < 22.4R3affected
Juniper NetworksJunos OS23.2 < 23.2R2affected

Weaknesses

  • CWE-400: CWE-400: Uncontrolled Resource Consumption

Workarounds

There are no known workarounds for this issue.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References