Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-39529 Details

Description

A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If DNS Domain Generation Algorithm (DGA) detection or tunnel detection, and DNS-filtering traceoptions are configured, and specific valid transit DNS traffic is received this causes a PFE crash and restart, leading to a Denial of Service. This issue affects Junos OS: * All versions before 21.4R3-S6, * 22.2 versions before 22.2R3-S3, * 22.3 versions before 22.3R3-S3, * 22.4 versions before 22.4R3, * 23.2 versions before 23.2R2.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://supportportal.juniper.net/JSA82988	CVE	Vendor Advisory
https://supportportal.juniper.net/JSA82988	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-134	Use of Externally-Controlled Format String	[email protected]
CWE-134	Use of Externally-Controlled Format String	[email protected]

Affected Products

Product	Versions
juniper junos	< 21.4 21.4 - 21.4 r1 21.4 r1-s1 21.4 r1-s2
CPE cpe:2.3:o:juniper:junos:::::::: cpe:2.3:o:juniper:junos:21.4:-:::::: cpe:2.3:o:juniper:junos:21.4:r1:::::: cpe:2.3:o:juniper:junos:21.4:r1-s1:::::: cpe:2.3:o:juniper:junos:21.4:r1-s2:::::: cpe:2.3:o:juniper:junos:21.4:r2:::::: cpe:2.3:o:juniper:junos:21.4:r2-s1:::::: cpe:2.3:o:juniper:junos:21.4:r2-s2:::::: cpe:2.3:o:juniper:junos:21.4:r3:::::: cpe:2.3:o:juniper:junos:21.4:r3-s1:::::: cpe:2.3:o:juniper:junos:21.4:r3-s2:::::: cpe:2.3:o:juniper:junos:21.4:r3-s3:::::: cpe:2.3:o:juniper:junos:21.4:r3-s4:::::: cpe:2.3:o:juniper:junos:21.4:r3-s5:::::: cpe:2.3:o:juniper:junos:22.2:-:::::: cpe:2.3:o:juniper:junos:22.2:r1:::::: cpe:2.3:o:juniper:junos:22.2:r1-s1:::::: cpe:2.3:o:juniper:junos:22.2:r1-s2:::::: cpe:2.3:o:juniper:junos:22.2:r2:::::: cpe:2.3:o:juniper:junos:22.2:r2-s1:::::: cpe:2.3:o:juniper:junos:22.2:r2-s2:::::: cpe:2.3:o:juniper:junos:22.2:r3:::::: cpe:2.3:o:juniper:junos:22.2:r3-s1:::::: cpe:2.3:o:juniper:junos:22.2:r3-s2:::::: cpe:2.3:o:juniper:junos:22.3:-:::::: cpe:2.3:o:juniper:junos:22.3:r1:::::: cpe:2.3:o:juniper:junos:22.3:r1-s1:::::: cpe:2.3:o:juniper:junos:22.3:r1-s2:::::: cpe:2.3:o:juniper:junos:22.3:r2:::::: cpe:2.3:o:juniper:junos:22.3:r2-s1:::::: cpe:2.3:o:juniper:junos:22.3:r2-s2:::::: cpe:2.3:o:juniper:junos:22.3:r3:::::: cpe:2.3:o:juniper:junos:22.3:r3-s1:::::: cpe:2.3:o:juniper:junos:22.3:r3-s2:::::: cpe:2.3:o:juniper:junos:22.4:-:::::: cpe:2.3:o:juniper:junos:22.4:r1:::::: cpe:2.3:o:juniper:junos:22.4:r1-s1:::::: cpe:2.3:o:juniper:junos:22.4:r1-s2:::::: cpe:2.3:o:juniper:junos:22.4:r2:::::: cpe:2.3:o:juniper:junos:22.4:r2-s1:::::: cpe:2.3:o:juniper:junos:22.4:r2-s2:::::: cpe:2.3:o:juniper:junos:23.2:-:::::: cpe:2.3:o:juniper:junos:23.2:r1:::::: cpe:2.3:o:juniper:junos:23.2:r1-s1:::::: cpe:2.3:o:juniper:junos:23.2:r1-s2:::::: Remediation No remediation found in references.
juniper srx100	All versions
CPE cpe:2.3:h:juniper:srx100:-:::::::* Remediation No remediation found in references.
juniper srx110	All versions
CPE cpe:2.3:h:juniper:srx110:-:::::::* Remediation No remediation found in references.
juniper srx1400	All versions
CPE cpe:2.3:h:juniper:srx1400:-:::::::* Remediation No remediation found in references.
juniper srx1500	All versions
CPE cpe:2.3:h:juniper:srx1500:-:::::::* Remediation No remediation found in references.
juniper srx1600	All versions
CPE cpe:2.3:h:juniper:srx1600:-:::::::* Remediation No remediation found in references.
juniper srx210	All versions
CPE cpe:2.3:h:juniper:srx210:-:::::::* Remediation No remediation found in references.
juniper srx220	All versions
CPE cpe:2.3:h:juniper:srx220:-:::::::* Remediation No remediation found in references.
juniper srx2300	All versions
CPE cpe:2.3:h:juniper:srx2300:-:::::::* Remediation No remediation found in references.
juniper srx240	All versions
CPE cpe:2.3:h:juniper:srx240:-:::::::* Remediation No remediation found in references.
juniper srx240h2	All versions
CPE cpe:2.3:h:juniper:srx240h2:-:::::::* Remediation No remediation found in references.
juniper srx240m	All versions
CPE cpe:2.3:h:juniper:srx240m:-:::::::* Remediation No remediation found in references.
juniper srx300	All versions
CPE cpe:2.3:h:juniper:srx300:-:::::::* Remediation No remediation found in references.
juniper srx320	All versions
CPE cpe:2.3:h:juniper:srx320:-:::::::* Remediation No remediation found in references.
juniper srx340	All versions
CPE cpe:2.3:h:juniper:srx340:-:::::::* Remediation No remediation found in references.
juniper srx3400	All versions
CPE cpe:2.3:h:juniper:srx3400:-:::::::* Remediation No remediation found in references.
juniper srx345	All versions
CPE cpe:2.3:h:juniper:srx345:-:::::::* Remediation No remediation found in references.
juniper srx3600	All versions
CPE cpe:2.3:h:juniper:srx3600:-:::::::* Remediation No remediation found in references.
juniper srx380	All versions
CPE cpe:2.3:h:juniper:srx380:-:::::::* Remediation No remediation found in references.
juniper srx4000	All versions
CPE cpe:2.3:h:juniper:srx4000:-:::::::* Remediation No remediation found in references.
juniper srx4100	All versions
CPE cpe:2.3:h:juniper:srx4100:-:::::::* Remediation No remediation found in references.
juniper srx4200	All versions
CPE cpe:2.3:h:juniper:srx4200:-:::::::* Remediation No remediation found in references.
juniper srx4300	All versions
CPE cpe:2.3:h:juniper:srx4300:-:::::::* Remediation No remediation found in references.
juniper srx4600	All versions
CPE cpe:2.3:h:juniper:srx4600:-:::::::* Remediation No remediation found in references.
juniper srx4700	All versions
CPE cpe:2.3:h:juniper:srx4700:-:::::::* Remediation No remediation found in references.
juniper srx5000	All versions
CPE cpe:2.3:h:juniper:srx5000:-:::::::* Remediation No remediation found in references.
juniper srx5400	All versions
CPE cpe:2.3:h:juniper:srx5400:-:::::::* Remediation No remediation found in references.
juniper srx550	All versions
CPE cpe:2.3:h:juniper:srx550:-:::::::* Remediation No remediation found in references.
juniper srx550 hm	All versions
CPE cpe:2.3:h:juniper:srx550_hm:-:::::::* Remediation No remediation found in references.
juniper srx550m	All versions
CPE cpe:2.3:h:juniper:srx550m:-:::::::* Remediation No remediation found in references.
juniper srx5600	All versions
CPE cpe:2.3:h:juniper:srx5600:-:::::::* Remediation No remediation found in references.
juniper srx5800	All versions
CPE cpe:2.3:h:juniper:srx5800:-:::::::* Remediation No remediation found in references.
juniper srx650	All versions
CPE cpe:2.3:h:juniper:srx650:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
Sep 23, 2024	Initial Analysis	[email protected]
Jul 11, 2024	New CVE Received	[email protected]

CVE-2024-39529 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO