CVE-2024-39552Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash

Description

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause the RPD process to crash leading to a Denial of Service (DoS). When a malformed BGP UPDATE packet is received over an established BGP session, RPD crashes and restarts. Continuous receipt of the malformed BGP UPDATE messages will create a sustained Denial of Service (DoS) condition for impacted devices. This issue affects eBGP and iBGP, in both IPv4 and IPv6 implementations. This issue requires a remote attacker to have at least one established BGP session. This issue affects: Juniper Networks Junos OS: * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S6; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S2; * 22.4 versions earlier than 22.4R3; * 23.2 versions earlier than 23.2R2. Juniper Networks Junos OS Evolved: * All versions earlier than 21.2R3-S7; * 21.3-EVO versions earlier than 21.3R3-S5; * 21.4-EVO versions earlier than 21.4R3-S8; * 22.1-EVO versions earlier than 22.1R3-S4; * 22.2-EVO versions earlier than 22.2R3-S3; * 22.3-EVO versions earlier than 22.3R3-S2; * 22.4-EVO versions earlier than 22.4R3; * 23.2-EVO versions earlier than 23.2R2.

Timeline

Scores

EPSS (exploitation in 30 days)

0.59% · top 51% of all CVEs (12 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.7.

Affected products

• Juniper Networks · Junos OS

  • affected < 20.4R3-S9
  • affected 21.2 – < 21.2R3-S7
  • affected 21.3 – < 21.3R3-S6
  • affected 21.4 – < 21.4R3-S6
  • affected 22.1 – < 22.1R3-S4
  • affected 22.2 – < 22.2R3-S3
  • affected 22.3 – < 22.3R3-S2
  • affected 22.4 – < 22.4R3
  • affected 23.2 – < 23.2R2

• Juniper Networks · Junos OS Evolved

  • affected < 21.2R3-S7-EVO
  • affected 21.3-EVO – < 21.3R3-S5-EVO
  • affected 21.4-EVO – < 21.4R3-S8-EVO
  • affected 22.1-EVO – < 22.1R3-S4-EVO
  • affected 22.2-EVO – < 22.2R3-S3-EVO
  • affected 22.3-EVO – < 22.3R3-S2-EVO
  • affected 22.4-EVO – < 22.4R3-EVO
  • affected 23.2-EVO – < 23.2R2-EVO
  • affected 23.4-EVO – < 23.4R1-EVO

What to do

Solution: The following software releases have been updated to resolve this specific issue: Junos OS: 20.4R3-S9, 21.2R3-S7, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S3, 22.3R3-S2, 22.4R3, 23.2R2, 23.4R1, and all subsequent releases. Junos OS Evolved: 21.2R3-S7-EVO, 21.3R3-S5-EVO, 21.4R3-S8-EVO, 22.1R3-S4-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.

Workaround: There are no known workarounds for this issue.

Exploitation: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2024-38078 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-39552](https://cveledger.app/badge/CVE-2024-39552.svg)](https://cveledger.app/cve/CVE-2024-39552)

Record last updated 2 Aug 2024, 04:26 UTC.