CVE-2024-21611

<br /> A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).<br /> <br /> In a Juniper Flow Monitoring (jflow) scenario route churn that causes BGP next hops to be updated will cause a slow memory leak and eventually a crash and restart of rpd.<br /> <br /> Thread level memory utilization for the areas where the leak occurs can be checked using the below command:<br /> <br /> user@host&gt; show task memory detail | match so_in<br /> so_in6 28 32 344450 11022400 344760 11032320<br /> so_in 8 16 1841629 29466064 1841734 29467744<br /> This issue affects:<br /> <br /> Junos OS<br /> <br /> <br /> <br /> * 21.4 versions earlier than 21.4R3;<br /> * 22.1 versions earlier than 22.1R3;<br /> * 22.2 versions earlier than 22.2R3.<br /> <br /> <br /> <br /> <br /> Junos OS Evolved<br /> <br /> <br /> <br /> * 21.4-EVO versions earlier than 21.4R3-EVO;<br /> * 22.1-EVO versions earlier than 22.1R3-EVO;<br /> * 22.2-EVO versions earlier than 22.2R3-EVO.<br /> <br /> <br /> <br /> <br /> This issue does not affect:<br /> <br /> Juniper Networks Junos OS versions earlier than 21.4R1.<br /> <br /> Juniper Networks Junos OS Evolved versions earlier than 21.4R1.<br /> <br /> <br /> <br />