{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2024-39535",
        "ASSIGNER": "sirt@juniper.net",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).\n\nWhen a device has a Layer 3 or an IRB interface configured in a VPLS instance and specific traffic is received, the evo-pfemand processes crashes which causes a service outage for the respective FPC until the system is recovered manually.\n\nThis issue only affects Junos OS Evolved 22.4R2-S1 and 22.4R2-S2 releases and is fixed in 22.4R3. No other releases are affected."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
                        "cweId": "CWE-754"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Juniper Networks",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Junos OS Evolved",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "<",
                                            "version_name": "22.4R2-S1-EVO",
                                            "version_value": "22.4R3-EVO"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://supportportal.juniper.net/JSA82995",
                "refsource": "MISC",
                "name": "https://supportportal.juniper.net/JSA82995"
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.1.0-dev"
    },
    "source": {
        "advisory": "JSA82995",
        "defect": [
            "1789658"
        ],
        "discovery": "USER"
    },
    "configuration": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "For a device to be exposed to this issue, it need to be configued as follows:<br><br><tt>[ routing-instances &lt;name&gt; instance-type vpls ]<br>\n\n[ routing-instances &lt;name&gt;&nbsp;routing-interface irb.&lt;number&gt; ]</tt><br><tt><br>or<br></tt><br><tt>\n\n\n\n\n\n[ interfaces &lt;name&gt; unit &lt;unit&gt; family inet(6) ... ]<br>\n\n[ routing-instances &lt;name&gt; instance-type vpls ]<br>\n\n\n\n[ routing-instances &lt;name&gt; interface &lt;name&gt;.&lt;unit&gt; ]<br></tt>"
                }
            ],
            "value": "For a device to be exposed to this issue, it need to be configued as follows:\n\n[ routing-instances <name> instance-type vpls ]\n\n\n[ routing-instances <name>\u00a0routing-interface irb.<number> ]\n\nor\n\n\n\n\n\n\n\n[ interfaces <name> unit <unit> family inet(6) ... ]\n\n\n[ routing-instances <name> instance-type vpls ]\n\n\n\n\n[ routing-instances <name> interface <name>.<unit> ]"
        }
    ],
    "work_around": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "There are no known workarounds for this issue."
                }
            ],
            "value": "There are no known workarounds for this issue."
        }
    ],
    "exploit": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
                }
            ],
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
    ],
    "solution": [
        {
            "lang": "en",
            "supportingMedia": [
                {
                    "base64": false,
                    "type": "text/html",
                    "value": "The following software releases have been updated to resolve this specific issue: 22.4R3-EVO, and all subsequent releases."
                }
            ],
            "value": "The following software releases have been updated to resolve this specific issue: 22.4R3-EVO, and all subsequent releases."
        }
    ],
    "impact": {
        "cvss": [
            {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
            }
        ]
    }
}