CVE-2024-21618

An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause Denial of Service (DoS). On all Junos OS and Junos OS Evolved platforms, when LLDP is enabled on a specific interface, and a malformed LLDP packet is received, l2cpd crashes and restarts. The impact of the l2cpd crash is reinitialization of STP protocols (RSTP, MSTP or VSTP), and MVRP and ERP. Also, if any services depend on LLDP state (like PoE or VoIP device recognition), then these will also be affected. This issue affects: Junos OS: * from 21.4 before 21.4R3-S4,  * from 22.1 before 22.1R3-S4,  * from 22.2 before 22.2R3-S2,  * from 22.3 before 22.3R2-S2, 22.3R3-S1,  * from 22.4 before 22.4R3,  * from 23.2 before 23.2R2. Junos OS Evolved: * from 21.4-EVO before 21.4R3-S5-EVO,  * from 22.1-EVO before 22.1R3-S4-EVO,  * from 22.2-EVO before 22.2R3-S2-EVO,  * from 22.3-EVO before 22.3R2-S2-EVO, 22.3R3-S1-EVO,  * from 22.4-EVO before 22.4R3-EVO,  * from 23.2-EVO before 23.2R2-EVO. This issue does not affect: * Junos OS versions prior to 21.4R1; * Junos OS Evolved versions prior to 21.4R1-EVO.

• CWE-788
• CWE-125

• https://supportportal.juniper.net/JSA75759Issue Tracking, Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LIssue Tracking, Vendor Advisory
• https://supportportal.juniper.net/JSA75759Issue Tracking, Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LIssue Tracking, Vendor Advisory

Published

Apr 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21612 An Improper Handling of Syntactically Invalid Structure…7.5
• CVE-2024-21613 A Missing Release of Memory after Effective Lifetime vulner…6.5
• CVE-2024-21614 An Improper Check for Unusual or Exceptional Conditions vul…7.5
• CVE-2024-21615An Incorrect Default Permissions vulnerability in Juniper Ne…5.1
• CVE-2024-21616 An Improper Validation of Syntactic Correctness of Input vu…7.5
• CVE-2024-21617 An Incomplete Cleanup vulnerability in Nonstop active routi…6.5
• CVE-2024-21619A Missing Authentication for Critical Function vulnerability…7.5
• CVE-2024-2162An OS Command Injection vulnerability in Kiloview NDI allows…8.8
• CVE-2024-21620An Improper Neutralization of Input During Web Page Generati…6.1
• CVE-2024-21622Craft is a content management system. This is a potential mo…8.8
• CVE-2024-21623OTCLient is an alternative tibia client for otserv. Prior to…9.8
• CVE-2024-21624nonebot2 is a cross-platform Python asynchronous chatbot fra…6.5