CVE-2024-39547— Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization
Quick assessment
Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS和Juniper Networks Junos OS Evolved都是美国瞻博网络（Juniper Networks）公司的产品。Juniper Networks Junos OS是一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。Juniper Networks Junos OS Evolved是Junos OS 的升级版系统。 Juniper Networks Junos OS和Juniper Network
Possible ATT&CK Techniques 2 AI
T1499.002 · Service Exhaustion Flood T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-39547
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Handling of Exceptional Conditions vulnerability in the rpd-server of Juniper Networks Junos OS and Junos OS Evolved within cRPD allows an unauthenticated network-based attacker sending crafted TCP traffic to the routing engine (RE) to cause a CPU-based Denial of Service (DoS).
If specially crafted TCP traffic is received by the control plane, or a TCP session terminates unexpectedly, it will cause increased control plane CPU utilization by the rpd-server process.
While not explicitly required, the impact is more severe when RIB sharding is enabled.
Task accounting shows unexpected reads by the RPD Server jobs for shards:
user@junos> show task accounting detail
...
read:RPD Server.0.0.0.0+780.192.168.0.78+48886 TOT:00000003.00379787 MAX:00000000.00080516 RUNS: 233888\
read:RPD Server.0.0.0.0+780.192.168.0.78+49144 TOT:00000004.00007565 MAX:00000000.00080360 RUNS: 233888\
read:RPD Server.0.0.0.0+780.192.168.0.78+49694 TOT:00000003.00600584 MAX:00000000.00080463 RUNS: 233888\
read:RPD Server.0.0.0.0+780.192.168.0.78+50246 TOT:00000004.00346998 MAX:00000000.00080338 RUNS: 233888\
This issue affects:
Junos OS with cRPD:
* All versions before 21.2R3-S8,
* 21.4 before 21.4R3-S7,
* 22.1 before 22.1R3-S6,
* 22.2 before 22.2R3-S4,
* 22.3 before 22.3R3-S3,
* 22.4 before 22.4R3-S2,
* 23.2 before 23.2R2-S2,
* 24.2 before 24.2R2;
Junos OS Evolved with cRPD:
* All versions before 21.4R3-S7-EVO,
* 22.2 before 22.2R3-S4-EVO,
* 22.3 before 22.3R3-S3-EVO,
* 22.4 before 22.4R3-S2-EVO,
* 23.2 before 23.2R2-EVO.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对异常条件的处理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS和Juniper Networks Junos OS Evolved都是美国瞻博网络（Juniper Networks）公司的产品。Juniper Networks Junos OS是一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。Juniper Networks Junos OS Evolved是Junos OS 的升级版系统。 Juniper Networks Junos OS和Juniper Network
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 0 ~ 21.2R3-S8 | - |
|
| Juniper Networks | Junos OS Evolved | 0 ~ 21.4R3-S7-EVO | - |
|
II. Public POCs for CVE-2024-39547
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-39547
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-39547 (1)
Same Patch Batch · Juniper Networks · 2024-10-11 · 25 CVEs total
| CVE-2024-47490 | 8.2 HIGH | Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resourc |
| CVE-2024-47504 | 7.5 HIGH | Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash |
| CVE-2024-47502 | 7.5 HIGH | Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to |
| CVE-2024-47499 | 7.5 HIGH | Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute |
| CVE-2024-47497 | 7.5 HIGH | Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffi |
| CVE-2024-39563 | 7.3 HIGH | Junos Space: Remote Command Execution (RCE) vulnerability in web application |
| CVE-2024-47495 | 6.7 MEDIUM | Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privil |
| CVE-2024-39526 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Serie |
| CVE-2024-47509 | 6.5 MEDIUM | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a |
| CVE-2024-47508 | 6.5 MEDIUM | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a |
| CVE-2024-47505 | 6.5 MEDIUM | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a |
| CVE-2024-47503 | 6.5 MEDIUM | Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd cras |
| CVE-2024-47498 | 6.5 MEDIUM | Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effec |
| CVE-2024-47493 | 6.5 MEDIUM | Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC |
| CVE-2024-47506 | 5.9 MEDIUM | Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a |
| CVE-2024-47491 | 5.9 MEDIUM | Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to |
| CVE-2024-47494 | 5.9 MEDIUM | Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset |
| CVE-2024-47489 | 5.8 MEDIUM | Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly |
| CVE-2024-47507 | 5.8 MEDIUM | Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an |
| CVE-2024-47496 | 5.5 MEDIUM | Junos OS: MX Series: The PFE will crash on running specific command |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57027
Junos OS: EX4100 Series, EX4400: With sFlow configured in a
Same vendor: Juniper Networks
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
Same weakness: CWE-755
-
CVE-2026-49305
Huawei HarmonyOS 异常处理不当漏洞 -
CVE-2026-59952
Valibot: record() issue paths can make flatten() throw for i -
CVE-2026-42792
epmd permanent DoS via EMFILE on accept(2) in erts -
CVE-2026-48036
Hulumi: Drift classifier fails open on adapter errors and ov -
CVE-2026-16730
Dbus-broker: dbus-broker: session bus denial of service via
V. Comments for CVE-2024-39547
No comments yet