CVE-2024-39540
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device receives specific valid TCP traffic, the pfe crashes and restarts leading to a momentary but complete service outage. This issue affects Junos OS: 21.2 releases from 21.2R3-S5 before 21.2R3-S6. This issue does not affect earlier or later releases.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- EPSS probability
- 0.49%
- CWE
- CWE-754
- Published
- 2024-07-11
- Last modified
- 2026-03-13
Affected products
- Juniper Networks Junos OS
Weakness type
Related vulnerabilities
- CVE-2026-87012 — Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
- CVE-2026-87656 — Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote...
- CVE-2026-87532 — Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote...
- CVE-2026-87548 — Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote...
- CVE-2026-87645 — Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote...
- CVE-2026-73314 — XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook
- CVE-2026-85014 — undici vulnerable to Denial of Service via WebSocketStream unclean close
- CVE-2026-55484 — ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server