Medium severity · published Oct 11, 2024
CVE-2024-47509
Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS).When specific SNMP GET operations or specific low-priviledged CLI commands are executed, a GUID resource leak will occur, eventually leading to exhaustion and resulting in FPCs to hang. Affected FPCs need to be manually restarted to recover. GUID exhaustion will trigger a syslog message like one of the following: evo-pfemand[<pid>]: get_next_guid: Ran out of Guid Space ... evo-aftmand-zx[<pid>]: get_next_guid: Ran out of Guid Space ... The leak can be monitored by running the following command and taking note of the values in the rightmost column labeled Guids: user@host> show platform application-info allocations app evo-pfemand/evo-pfemand In case one or more of these values are constantly increasing the leak is happening. This issue affects Junos OS Evolved: * All versions before 21.4R2-EVO, * 22.1 versions before 22.1R2-EVO. Please note that this issue is similar to, but different from CVE-2024-47505 and CVE-2024-47508.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Junos OS Evolved · Juniper Networks
21.4 before 21.4R2-EVO; 22.1 before 22.1R2-EVO · source: vendor, NVD
Affected product
JO
Junos OS Evolved
Juniper Networks
More from Junos OS Evolved
9.8
CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
9.8
CVE-2026-101983
Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
9.8
CVE-2026-101982
Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
9.8
CVE-2026-33796
Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
9.8
CVE-2026-33789
Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service