CVE-2024-21596

A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). If an attacker sends a specific BGP UPDATE message to the device, this will cause a memory overwrite and therefore an RPD crash and restart in the backup Routing Engine (RE). Continued receipt of these packets will cause a sustained Denial of Service (DoS) condition in the backup RE. The primary RE is not impacted by this issue and there is no impact on traffic. This issue only affects devices with NSR enabled. Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability. This issue requires an attacker to have an established BGP session to a system affected by the issue. This issue affects both eBGP and iBGP implementations. This issue affects: Juniper Networks Junos OS * All versions earlier than 20.4R3-S9; * 21.2 versions earlier than 21.2R3-S7; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S2; * 22.3 versions earlier than 22.3R3-S1; * 22.4 versions earlier than 22.4R2-S2, 22.4R3; * 23.1 versions earlier than 23.1R2; * 23.2 versions earlier than 23.2R1-S2, 23.2R2. Juniper Networks Junos OS Evolved * All versions earlier than 21.3R3-S5-EVO; * 21.4-EVO versions earlier than 21.4R3-S5-EVO; * 22.1-EVO versions earlier than 22.1R3-S4-EVO; * 22.2-EVO versions earlier than 22.2R3-S2-EVO; * 22.3-EVO versions later than 22.3R1-EVO; * 22.4-EVO versions earlier than 22.4R2-S2-EVO, 22.4R3-EVO; * 23.1-EVO versions earlier than 23.1R2-EVO; * 23.2-EVO versions earlier than 23.2R1-S2-EVO, 23.2R2-EVO.

• CWE-122
• CWE-787

• https://supportportal.juniper.net/JSA75735Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:NVendor Advisory
• https://supportportal.juniper.net/JSA75735Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:NVendor Advisory

Published

Jan 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2159The Social Sharing Plugin WordPress plugin before 3.3.61 do…4.7
• CVE-2024-21590An Improper Input Validation vulnerability in Juniper Tunnel…6.5
• CVE-2024-21591 An Out-of-bounds Write vulnerability in J-Web of Juniper Ne…9.8
• CVE-2024-21593An Improper Check or Handling of Exceptional Conditions vuln…7.1
• CVE-2024-21594 A Heap-based Buffer Overflow vulnerability in the Network S…5.5
• CVE-2024-21595 An Improper Validation of Syntactic Correctness of Input vu…7.5
• CVE-2024-21597 An Exposure of Resource to Wrong Sphere vulnerability in th…7.5
• CVE-2024-21598An Improper Validation of Syntactic Correctness of Input vul…8.7
• CVE-2024-21599 A Missing Release of Memory after Effective Lifetime vulner…6.5
• CVE-2024-21600 An Improper Neutralization of Equivalent Special Elements v…6.5
• CVE-2024-21601 A Concurrent Execution using Shared Resource with Improper …5.9
• CVE-2024-21602 A NULL Pointer Dereference vulnerability in Juniper Network…7.5