CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

High 8.2 Published 11 Oct 2024 Updated 11 Oct 2024

A race condition in Junos OS AgentD allows attackers to cause memory corruption and FPC crashes, resulting in denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-47494?

CVE-2024-47494 is a high-severity vulnerability in Juniper Junos, published on 11 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD process into a state where AgentD attempts to reap an already destroyed sensor. This reaping attempt then leads to memory corruption causing the FPC to crash which is a Denial of Service (DoS).

The FPC will recover automatically without user intervention after the crash. This issue affects Junos OS:

* All versions before 21.4R3-S9 * From 22.2 before 22.2R3-S5, * From 22.3 before 22.3R3-S4, * From 22.4 before 22.4R3-S3, * From 23.2 before 23.2R2-S2, * From 23.4 before 23.4R2.

This issue does not affect Junos OS Evolved.

Weakness: CWE-367

Which versions are affected by CVE-2024-47494?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2024-47494?

No fix has been published for CVE-2024-47494 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-47494 being exploited?

There is no known exploitation of CVE-2024-47494 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-f3wp-gx52-q6g2.