CVE-2024-30382

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to send a specific routing update, causing an rpd core due to memory corruption, leading to a Denial of Service (DoS). This issue can only be triggered when the system is configured for CoS-based forwarding (CBF) with a policy map containing a cos-next-hop-map action (see below). This issue affects: Junos OS: * all versions before 20.4R3-S10, * from 21.2 before 21.2R3-S8, * from 21.3 before 21.3R3, * from 21.4 before 21.4R3, * from 22.1 before 22.1R2; Junos OS Evolved: * all versions before 21.2R3-S8-EVO, * from 21.3 before 21.3R3-EVO, * from 21.4 before 21.4R3-EVO, * from 22.1 before 22.1R2-EVO.

Scoring

Severity

HIGH

CVSS base score

8.7

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

EPSS probability

0.71%

CWE

CWE-755

Published

2024-04-12

Last modified

2026-03-13

Affected products

• Juniper Networks Junos OS
• Juniper Networks Junos OS
• Juniper Networks Junos OS
• Juniper Networks Junos OS
• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved

Weakness type

• CWE-755

Related vulnerabilities

• CVE-2022-23121 — This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati
• CVE-2021-40402 — An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Ge
• CVE-2025-10156 — PickleScan Security Bypass via Bad CRC in ZIP Archive
• CVE-2024-34750 — Apache Tomcat: HTTP/2 excess header handling DoS
• CVE-2024-21907 — Improper Handling of Exceptional Conditions in Newtonsoft.Json
• CVE-2026-27586 — Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed
• CVE-2026-21906 — Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash
• CVE-2025-9437 — Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

Markdown version · Browse all CVEs