What’s Vulnerable › Vulnerabilities
CVE-2024-47506: Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-11 · updated 2026-06-17
- Weakness: CWE-833
Description
A Deadlock vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a large amount of traffic is processed by ATP Cloud inspection, a deadlock can occur which will result in a PFE crash and restart. Whether the crash occurs, depends on system internal timing that is outside the attackers control. This issue affects Junos OS on SRX Series: * All versions before 21.3R3-S1, * 21.4 versions before 21.4R3, * 22.1 versions before 22.1R2, * 22.2 versions before 22.2R1-S2, 22.2R2.
Affected products
- Juniper Junos OS: before 21.3; 21.3, 21.3-r1, 21.3-r1-s1, 21.3-r1-s2, 21.3-r2, 21.3-r2-s1 (+17) — fixed in 21.3
How to fix
Upgrade to a fixed version: Juniper Junos OS 21.3. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-47506 or the next vulnerability affects your stack