CVE-2024-30397

An Improper Check for Unusual or Exceptional Conditions vulnerability in the the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS). The pkid is responsible for the certificate verification. Upon a failed verification, the pkid uses all CPU resources and becomes unresponsive to future verification attempts. This means that all subsequent VPN negotiations depending on certificate verification will fail. This CPU utilization of pkid can be checked using this command:   root@srx> show system processes extensive | match pkid   xxxxx  root  103  0  846M  136M  CPU1  1 569:00 100.00% pkid This issue affects: Juniper Networks Junos OS * All versions prior to 20.4R3-S10; * 21.2 versions prior to 21.2R3-S7; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S3; * 22.3 versions prior to 22.3R3-S1; * 22.4 versions prior to 22.4R3; * 23.2 versions prior to 23.2R1-S2, 23.2R2.

• CWE-754
• CWE-754

• https://supportportal.juniper.net/JSA79179Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LIssue Tracking
• https://supportportal.juniper.net/JSA79179Vendor Advisory
• https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LIssue Tracking

Published

Apr 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3039A vulnerability classified as critical has been found in Sha…9.8
• CVE-2024-30390An Improper Restriction of Excessive Authentication Attempts…6.9
• CVE-2024-30391A Missing Authentication for Critical Function vulnerability…6.3
• CVE-2024-30392A Stack-based Buffer Overflow vulnerability in Flow Processi…8.7
• CVE-2024-30394A Stack-based Buffer Overflow vulnerability in the Routing P…8.7
• CVE-2024-30395An Improper Validation of Specified Type of Input vulnerabil…8.7
• CVE-2024-30398An Improper Restriction of Operations within the Bounds of a…8.7
• CVE-2024-3040A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-30401An Out-of-bounds Read vulnerability in the advanced forwardi…8.2
• CVE-2024-30402An Improper Check for Unusual or Exceptional Conditions vuln…5.3
• CVE-2024-30403A NULL Pointer Dereference vulnerability in the Packet Forwa…7.1
• CVE-2024-30405An Incorrect Calculation of Buffer Size vulnerability in Jun…8.7