CVE-2024-39515

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. In some cases, rpd fails to restart requiring a manual restart via the 'restart routing' CLI command. This issue only affects systems with BGP traceoptions enabled and requires a BGP session to be already established. Systems without BGP traceoptions enabled are not affected by this issue. This issue affects iBGP and eBGP, and both IPv4 and IPv6 are affected by this vulnerability. This issue affects: Junos OS:  * All versions before 21.4R3-S8,  * 22.2 before 22.2R3-S5,  * 22.3 before 22.3R3-S4,  * 22.4 before 22.4R3-S3,  * 23.2 before 23.2R2-S2,  * 23.4 before 23.4R2;  Junos OS Evolved:  * All versions before 21.4R3-S8-EVO,  * 22.2-EVO before 22.2R3-S5-EVO,  * 22.3-EVO before 22.3R3-S4-EVO,  * 22.4-EVO before 22.4R3-S3-EVO,  * 23.2-EVO before 23.2R2-S2-EVO,  * 23.4-EVO before 23.4R2-EVO.

• CWE-1288

• https://supportportal.juniper.net/JSA88099Vendor Advisory
• https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/traceoptions-edit-protocols-bgp.htmlTechnical Description

Published

Oct 9, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3951 PTC Codebeamer is vulnerable to a cross site scripting vuln…7.1
• CVE-2024-39510In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-39511An Improper Input Validation vulnerability in the 802.1X Aut…6.8
• CVE-2024-39512An Improper Physical Access Control vulnerability in the con…7
• CVE-2024-39513An Improper Input Validation vulnerability in the Packet For…6.8
• CVE-2024-39514An Improper Check or Handling of Exceptional Conditions vuln…7.1
• CVE-2024-39516An Out-of-Bounds Read vulnerability in the routing protocol…8.7
• CVE-2024-39517An Improper Check for Unusual or Exceptional Conditions vuln…7.1
• CVE-2024-39518A Heap-based Buffer Overflow vulnerability in the telemetry …8.7
• CVE-2024-39519An Improper Check for Unusual or Exceptional Conditions vuln…7.1
• CVE-2024-3952The Advanced Ads – Ad Manager & AdSense plugin for WordPress…6.4
• CVE-2024-39520An Improper Neutralization of Special Elements vulnerability…8.5