CVE-2024-39531

An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). If a value is configured for DDoS bandwidth or burst parameters for any protocol in a queue, all protocols which share the same queue will have their bandwidth or burst value changed to the new value. If, for example, OSPF was configured with a certain bandwidth value, ISIS would also be limited to this value. So inadvertently either the control plane is open for a high level of specific traffic which was supposed to be limited to a lower value, or the limit for a certain protocol is so low that chances to succeed with a volumetric DoS attack are significantly increased.  This issue affects Junos OS Evolved on ACX 7000 Series: * All versions before 21.4R3-S7-EVO, * 22.1 versions before 22.1R3-S6-EVO,  * 22.2 versions before 22.2R3-S3-EVO, * 22.3 versions before 22.3R3-S3-EVO,  * 22.4 versions before 22.4R3-S2-EVO, * 23.2 versions before 23.2R2-EVO, * 23.4 versions before 23.4R1-S1-EVO, 23.4R2-EVO.

• CWE-229

• https://supportportal.juniper.net/JSA82991Vendor Advisory
• https://supportportal.juniper.net/JSA82991Vendor Advisory

Published

Jul 11, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39526An Improper Handling of Exceptional Conditions vulnerability…7.1
• CVE-2024-39527An Exposure of Sensitive Information to an Unauthorized Acto…6.8
• CVE-2024-39528A Use After Free vulnerability in the Routing Protocol Daemo…6
• CVE-2024-39529A Use of Externally-Controlled Format String vulnerability i…8.7
• CVE-2024-3953Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-39530An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2024-39532An Insertion of Sensitive Information into Log File vulnerab…6.3
• CVE-2024-39533An Unimplemented or Unsupported Feature in the UI vulnerabil…6.9
• CVE-2024-39534An Incorrect Comparison vulnerability in the local address v…5.4
• CVE-2024-39535An Improper Check for Unusual or Exceptional Conditions vuln…7.1
• CVE-2024-39536A Missing Release of Memory after Effective Lifetime vulnera…6
• CVE-2024-39537An Improper Restriction of Communication Channel to Intended…6.9