CVE-2024-21617

<br /> An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service (DoS).<br /> <br /> On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manual reboot of the system will restore the services.<br /> <br /> Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.<br /> The memory usage can be monitored using the below commands.<br /> <br /> user@host&gt; show chassis routing-engine no-forwarding<br /> user@host&gt; show system memory | no-more<br /> This issue affects:<br /> <br /> Juniper Networks Junos OS<br /> <br /> <br /> <br /> * 21.2 versions earlier than 21.2R3-S5;<br /> * 21.3 versions earlier than 21.3R3-S4;<br /> * 21.4 versions earlier than 21.4R3-S4;<br /> * 22.1 versions earlier than 22.1R3-S2;<br /> * 22.2 versions earlier than 22.2R3-S2;<br /> * 22.3 versions earlier than 22.3R2-S1, 22.3R3;<br /> * 22.4 versions earlier than 22.4R1-S2, 22.4R2.<br /> <br /> <br /> <br /> <br /> This issue does not affect Junos OS versions earlier than 20.4R3-S7.<br /> <br /> <br /> <br />