fkie_cve-2024-21587
Vulnerability from fkie_nvd
Published
2024-01-12 01:15
Modified
2024-11-21 08:54
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory leak, ultimately leading to a Denial of Service (DoS). Memory can only be recovered by manually restarting bbe-smgd. This issue only occurs if BFD liveness detection for DHCP subscribers is enabled. Systems without BFD liveness detection enabled are not vulnerable to this issue. Indication of the issue can be observed by periodically executing the 'show system processes extensive' command, which will indicate an increase in memory allocation for bbe-smgd. A small amount of memory is leaked every time a DHCP subscriber logs in, which will become visible over time, ultimately leading to memory starvation. user@junos> show system processes extensive | match bbe-smgd 13071 root 24 0 415M 201M select 0 0:41 7.28% bbe-smgd{bbe-smgd} 13071 root 20 0 415M 201M select 1 0:04 0.00% bbe-smgd{bbe-smgd} ... user@junos> show system processes extensive | match bbe-smgd 13071 root 20 0 420M 208M select 0 4:33 0.10% bbe-smgd{bbe-smgd} 13071 root 20 0 420M 208M select 0 0:12 0.00% bbe-smgd{bbe-smgd} ... This issue affects Juniper Networks Junos OS on MX Series: * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S2; * 22.4 versions earlier than 22.4R2-S2, 22.4R3; * 23.2 versions earlier than 23.2R1-S1, 23.2R2.
References
sirt@juniper.nethttps://supportportal.juniper.net/JSA75725Vendor Advisory
sirt@juniper.nethttps://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://supportportal.juniper.net/JSA75725Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LThird Party Advisory
Impacted products
Vendor Product Version
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 20.4
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.2
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.3
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 21.4
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.1
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.2
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.3
juniper junos 22.4
juniper junos 22.4
juniper junos 22.4
juniper junos 22.4
juniper junos 22.4
juniper junos 22.4
juniper junos 23.2
juniper mx10 -
juniper mx10000 -
juniper mx10003 -
juniper mx10004 -
juniper mx10008 -
juniper mx10016 -
juniper mx104 -
juniper mx150 -
juniper mx2008 -
juniper mx2010 -
juniper mx2020 -
juniper mx204 -
juniper mx240 -
juniper mx304 -
juniper mx40 -
juniper mx480 -
juniper mx5 -
juniper mx80 -
juniper mx960 -


To clipboard 

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*",
                     matchCriteriaId: "3D361B23-A3C2-444B-BEB8-E231DA950567",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
                     matchCriteriaId: "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "037BA01C-3F5C-4503-A633-71765E9EF774",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*",
                     matchCriteriaId: "C54B047C-4B38-40C0-9855-067DCF7E48BD",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "38984199-E332-4A9C-A4C0-78083D052E15",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "AA6526FB-2941-4D18-9B2E-472AD5A62A53",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*",
                     matchCriteriaId: "09876787-A40A-4340-9C12-8628C325353B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "41615104-C17E-44DA-AB0D-6E2053BD4EF4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*",
                     matchCriteriaId: "1981DE38-36B5-469D-917E-92717EE3ED53",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*",
                     matchCriteriaId: "AFA68ACD-AAE5-4577-B734-23AAF77BC85A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*",
                     matchCriteriaId: "65948ABC-22BB-46D5-8545-0806EDB4B86E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*",
                     matchCriteriaId: "283E41CB-9A90-4521-96DC-F31AA592CFD8",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*",
                     matchCriteriaId: "14EEA504-CBC5-4F6F-889A-D505EC4BB5B1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*",
                     matchCriteriaId: "977DEF80-0DB5-4828-97AC-09BB3111D585",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:20.4:r3-s8:*:*:*:*:*:*",
                     matchCriteriaId: "C445622E-8E57-4990-A71A-E1993BFCB91A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*",
                     matchCriteriaId: "216E7DDE-453D-481F-92E2-9F8466CDDA3F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*",
                     matchCriteriaId: "A52AF794-B36B-43A6-82E9-628658624B0A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "3998DC76-F72F-4452-9150-652140B113EB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "36ED4552-2420-45F9-B6E4-6DA2B2B12870",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*",
                     matchCriteriaId: "C28A14E7-7EA0-4757-9764-E39A27CFDFA5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "4A43752D-A4AF-4B4E-B95B-192E42883A5B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "42986538-E9D0-4C2E-B1C4-A763A4EE451B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*",
                     matchCriteriaId: "DE22CA01-EA7E-4EE5-B59F-EE100688C1DA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "E596ABD9-6ECD-48DC-B770-87B7E62EA345",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*",
                     matchCriteriaId: "71745D02-D226-44DC-91AD-678C85F5E6FC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*",
                     matchCriteriaId: "39E44B09-7310-428C-8144-AE9DB0484D1F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*",
                     matchCriteriaId: "53938295-8999-4316-9DED-88E24D037852",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*",
                     matchCriteriaId: "2307BF56-640F-49A8-B060-6ACB0F653A61",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*",
                     matchCriteriaId: "737DDF96-7B1D-44E2-AD0F-E2F50858B2A3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*",
                     matchCriteriaId: "2E7D597D-F6B6-44C3-9EBC-4FA0686ACB5C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*",
                     matchCriteriaId: "CC78A4CB-D617-43FC-BB51-287D2D0C44ED",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "30FF67F8-1E3C-47A8-8859-709B3614BA6E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "0C7C507E-C85E-4BC6-A3B0-549516BAB524",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*",
                     matchCriteriaId: "6514CDE8-35DC-469F-89A3-078684D18F7A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "4624565D-8F59-44A8-B7A8-01AD579745E7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "4BF8CD82-C338-4D9A-8C98-FCB3CEAA9227",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*",
                     matchCriteriaId: "57E08E70-1AF3-4BA5-9A09-06DFE9663ADE",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "255B6F20-D32F-42C1-829C-AE9C7923558A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*",
                     matchCriteriaId: "90AE30DB-C448-4FE9-AC11-FF0F27CDA227",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*",
                     matchCriteriaId: "93F324AE-65D3-4CFC-AEAB-898CE1BD05CD",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*",
                     matchCriteriaId: "3CCBB2F4-F05B-4CC5-9B1B-ECCB798D0483",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*",
                     matchCriteriaId: "79ED3CE8-CC57-43AB-9A26-BBC87816062D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*",
                     matchCriteriaId: "4310D2D9-A8A6-48F8-9384-0A0692A1E1C3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "9962B01C-C57C-4359-9532-676AB81CE8B0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "62178549-B679-4902-BFDB-2993803B7FCE",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*",
                     matchCriteriaId: "9AD697DF-9738-4276-94ED-7B9380CD09F5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "09FF5818-0803-4646-A386-D7C645EE58A3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "2229FA59-EB24-49A2-85CE-F529A8DE6BA7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*",
                     matchCriteriaId: "0CB280D8-C5D8-4B51-A879-496ACCDE4538",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "5F3F54F1-75B3-400D-A735-2C27C8CEBE79",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*",
                     matchCriteriaId: "476A49E7-37E9-40F9-BF2D-9BBFFAA1DFFC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*",
                     matchCriteriaId: "0A5B196A-2AF1-4AE5-9148-A75A572807BC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*",
                     matchCriteriaId: "3B457616-2D91-4913-9A7D-038BBF8F1F66",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:-:*:*:*:*:*:*",
                     matchCriteriaId: "9D157211-535E-4B2D-B2FE-F697FAFDF65C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*",
                     matchCriteriaId: "3F96EBE9-2532-4E35-ABA5-CA68830476A4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "B4D936AE-FD74-4823-A824-2D9F24C25BFB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "E117E493-F4E1-4568-88E3-F243C74A2662",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*",
                     matchCriteriaId: "01E3E308-FD9C-4686-8C35-8472A0E99F0D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "3683A8F5-EE0E-4936-A005-DF7F6B75DED3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "1B615DBA-8C53-41D4-B264-D3EED8578471",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*",
                     matchCriteriaId: "B3124DD0-9E42-4896-9060-CB7DD07FC342",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "44F6FD6C-03AF-4D2C-B411-A753DE12A2DA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*",
                     matchCriteriaId: "D49FFB60-BA71-4902-9404-E67162919ADC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*",
                     matchCriteriaId: "EFF72FCA-C440-4D43-9BDB-F712DB413717",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*",
                     matchCriteriaId: "06156CD6-09D3-4A05-9C5E-BC64A70640F9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*",
                     matchCriteriaId: "E949B21B-AD62-4022-9088-06313277479E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "8D862E6F-0D01-4B25-8340-888C30F75A2F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "2F28F73E-8563-41B9-A313-BBAAD5B57A67",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*",
                     matchCriteriaId: "E37D4694-C80B-475E-AB5B-BB431F59C5E1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "5EC0D2D2-4922-4675-8A2C-57A08D7BE334",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "9EC91F9D-DEDA-46B4-A39F-59A2CDB86C2E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*",
                     matchCriteriaId: "591AA3E6-62A2-4A1A-A04C-E808F71D8B6E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "786F993E-32CB-492A-A7CC-A7E4F48EA8B9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:*",
                     matchCriteriaId: "60CEA89D-BAC4-41CD-A1D1-AA5EDDEBD54A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:*",
                     matchCriteriaId: "CEB98E3F-B0A9-488F-ACFC-56B9485E7C9E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*",
                     matchCriteriaId: "19519212-51DD-4448-B115-8A20A40192CC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "5CC9909E-AE9F-414D-99B1-83AA04D5297B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "FDE9E767-4713-4EA2-8D00-1382975A4A15",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*",
                     matchCriteriaId: "59DDA54E-6845-47EB-AE3C-5EC6BD33DFA7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "574730B0-56C8-4A03-867B-1737148ED9B1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r2-s2:*:*:*:*:*:*",
                     matchCriteriaId: "20EBC676-1B26-4A71-8326-0F892124290A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:*",
                     matchCriteriaId: "FB4C0FBF-8813-44E5-B71A-22CBAA603E2F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.3:r3-s1:*:*:*:*:*:*",
                     matchCriteriaId: "8BCDE58C-80CC-4C5A-9667-8A4468D8D76C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*",
                     matchCriteriaId: "1379EF30-AF04-4F98-8328-52A631F24737",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*",
                     matchCriteriaId: "28E42A41-7965-456B-B0AF-9D3229CE4D4C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*",
                     matchCriteriaId: "CB1A77D6-D3AD-481B-979C-8F778530B175",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*",
                     matchCriteriaId: "3A064B6B-A99B-4D8D-A62D-B00C7870BC30",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*",
                     matchCriteriaId: "40813417-A938-4F74-A419-8C5188A35486",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*",
                     matchCriteriaId: "7FC1BA1A-DF0E-4B15-86BA-24C60E546732",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*",
                     matchCriteriaId: "4B3B2FE1-C228-46BE-AC76-70C2687050AE",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "52699E2B-450A-431C-81E3-DC4483C8B4F2",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx10004:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "84F7BB7E-3A52-4C23-A4D2-50E75C912AFC",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "C39DA74D-F5C7-4C11-857D-50631A110644",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "F72C850A-0530-4DB7-A553-7E19F82122B5",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "7FE2089C-F341-4DC1-B76D-633BC699306D",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "27175D9A-CA2C-4218-8042-835E25DFCA43",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "00C7FC57-8ACF-45AA-A227-7E3B350FD24F",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "2754C2DF-DF6E-4109-9463-38B4E0465B77",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "F4A26704-A6A4-4C4F-9E12-A0A0259491EF",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx304:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "3F7FB0CC-624D-4AB9-A7AC-BB19838C3B22",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "104858BD-D31D-40E0-8524-2EC311F10EAC",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "3B557965-0040-4048-B56C-F564FF28635B",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "EB875EBD-A3CD-4466-B2A3-39D47FF94592",
                     vulnerable: false,
                  },
                  {
                     criteria: "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "B5E08E1E-0FE4-4294-9497-BBFFECA2A220",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "\nAn Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory leak, ultimately leading to a Denial of Service (DoS). Memory can only be recovered by manually restarting bbe-smgd.\n\nThis issue only occurs if BFD liveness detection for DHCP subscribers is enabled. Systems without BFD liveness detection enabled are not vulnerable to this issue.\n\nIndication of the issue can be observed by periodically executing the 'show system processes extensive' command, which will indicate an increase in memory allocation for bbe-smgd. A small amount of memory is leaked every time a DHCP subscriber logs in, which will become visible over time, ultimately leading to memory starvation.\n\nuser@junos> show system processes extensive | match bbe-smgd\n13071 root 24 0 415M 201M select 0 0:41 7.28% bbe-smgd{bbe-smgd}\n13071 root 20 0 415M 201M select 1 0:04 0.00% bbe-smgd{bbe-smgd}\n...\nuser@junos> show system processes extensive | match bbe-smgd\n13071 root 20 0 420M 208M select 0 4:33 0.10% bbe-smgd{bbe-smgd}\n13071 root 20 0 420M 208M select 0 0:12 0.00% bbe-smgd{bbe-smgd}\n...\nThis issue affects Juniper Networks Junos OS on MX Series:\n\n\n\n  *  All versions earlier than 20.4R3-S9;\n  *  21.2 versions earlier than 21.2R3-S7;\n  *  21.3 versions earlier than 21.3R3-S5;\n  *  21.4 versions earlier than 21.4R3-S5;\n  *  22.1 versions earlier than 22.1R3-S4;\n  *  22.2 versions earlier than 22.2R3-S3;\n  *  22.3 versions earlier than 22.3R3-S2;\n  *  22.4 versions earlier than 22.4R2-S2, 22.4R3;\n  *  23.2 versions earlier than 23.2R1-S1, 23.2R2.\n\n\n\n\n\n\n",
      },
      {
         lang: "es",
         value: "Una vulnerabilidad de manejo inadecuado de condiciones excepcionales en el demonio de administración de suscriptores de borde de banda ancha (bbe-smgd) de Juniper Networks Junos OS en la serie MX permite que un atacante conectado directamente al sistema vulnerable altere repetidamente las sesiones de suscriptores DHCP para causar, en última instancia, una pérdida lenta de memoria. lo que lleva a una denegación de servicio (DoS). La memoria sólo se puede recuperar reiniciando bbe-smgd manualmente. Este problema solo ocurre si la detección de actividad BFD para suscriptores de DHCP está habilitada. Los sistemas sin detección de actividad BFD habilitada no son vulnerables a este problema. La indicación del problema se puede observar ejecutando periódicamente el comando 'show system processes extensive', lo que indicará un aumento en la asignación de memoria para bbe-smgd. Cada vez que un suscriptor de DHCP inicia sesión, se pierde una pequeña cantidad de memoria, lo que se hará visible con el tiempo y, en última instancia, provocará una falta de memoria. user@junos> show system processes extensive | match bbe-smgd 13071 root 24 0 415M 201M select 0 0:41 7.28% bbe-smgd{bbe-smgd} 13071 root 20 0 415M 201M select 1 0:04 0.00% bbe-smgd{bbe-smgd} ... user@junos> show system processes extensive | match bbe-smgd 13071 root 20 0 420M 208M select 0 4:33 0.10% bbe-smgd{bbe-smgd} 13071 root 20 0 420M 208M select 0 0:12 0.00% bbe-smgd{bbe-smgd} ... Esto El problema afecta a Juniper Networks Junos OS en la serie MX: * Todas las versiones anteriores a 20.4R3-S9; * Versiones 21.2 anteriores a 21.2R3-S7; * Versiones 21.3 anteriores a 21.3R3-S5; * Versiones 21.4 anteriores a 21.4R3-S5; * Versiones 22.1 anteriores a 22.1R3-S4; * Versiones 22.2 anteriores a 22.2R3-S3; * Versiones 22.3 anteriores a 22.3R3-S2; * Versiones 22.4 anteriores a 22.4R2-S2, 22.4R3; * Versiones 23.2 anteriores a 23.2R1-S1, 23.2R2.",
      },
   ],
   id: "CVE-2024-21587",
   lastModified: "2024-11-21T08:54:40.027",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "ADJACENT_NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 6.5,
               baseSeverity: "MEDIUM",
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
               version: "3.1",
            },
            exploitabilityScore: 2.8,
            impactScore: 3.6,
            source: "sirt@juniper.net",
            type: "Secondary",
         },
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "ADJACENT_NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 6.5,
               baseSeverity: "MEDIUM",
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
               version: "3.1",
            },
            exploitabilityScore: 2.8,
            impactScore: 3.6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2024-01-12T01:15:46.290",
   references: [
      {
         source: "sirt@juniper.net",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://supportportal.juniper.net/JSA75725",
      },
      {
         source: "sirt@juniper.net",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://supportportal.juniper.net/JSA75725",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
      },
   ],
   sourceIdentifier: "sirt@juniper.net",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-755",
            },
         ],
         source: "sirt@juniper.net",
         type: "Secondary",
      },
      {
         description: [
            {
               lang: "en",
               value: "CWE-755",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.