{"metadata": {"vulnerability": "cve-2024-39549", "count": 35, "kinds": {"milestone": 9, "sighting": 6, "kev": 0, "other": 20}}, "data": [{"timestamp": "2024-06-25T15:12:53.246Z", "date_only": false, "value": "2024-06-25T15:12:53.246Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-39549", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": true, "value": "2024-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-10T16:00:00Z", "date_only": false, "value": "2024-07-10T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "cve-2024-39549", "field": "containers.cna.datePublic"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": true, "value": "2024-07-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "vendor_advisories.28.published_at"}, {"timestamp": "2024-07-11T16:27:19.238Z", "date_only": false, "value": "2024-07-11T16:27:19.238Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-39549", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-11T17:15:15Z", "date_only": false, "value": "2024-07-11T17:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HW78-GPFH-VW3Q", "record": "GHSA-HW78-GPFH-VW3Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-11T17:15:15.433Z", "date_only": false, "value": "2024-07-11T17:15:15.433", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39549", "record": "FKIE_CVE-2024-39549", "field": "published"}, {"timestamp": "2024-07-11T18:31:13Z", "date_only": false, "value": "2024-07-11T18:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HW78-GPFH-VW3Q", "record": "GHSA-HW78-GPFH-VW3Q", "field": "published"}, {"timestamp": "2024-07-11T19:59:55Z", "date_only": false, "value": "2024-07-11T19:59:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/681", "record": "CVE-2024-39549", "field": "creation_timestamp", "uuid": "01a4d230-2414-4fa3-acd6-a7a95ae24848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39549 - A Missing Release of Memory after Effective Lifeti\", \n  \"Content\": \"CVE ID : CVE-2024-39549 \nPublished : July 11, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not properly freed in all circumstances, leading to a Denial of Service (DoS).  \n  \nConsumed memory can be freed by manually restarting Routing Protocol Daemon (rpd).  \n  \nMemory utilization could be monitored by:\u00a0  \nuser@host> show system memory or show system monitor memory status  \n  \nThis issue affects:  \n  \nJunos OS:\u00a0  *  All versions before 21.2R3-S8,\u00a0  \n  *  from 21.4 before 21.4R3-S8,  \n  \n  *  from 22.2 before 22.2R3-S4,\u00a0  \n  *  from 22.3 before 22.3R3-S3,\u00a0  \n  *  from 22.4 before 22.4R3-S3,  \n  *  from 23.2 before 23.2R2-S1,\u00a0  \n  *  from 23.4 before 23.4R1-S2, 23.4R2,  \n  *  from 24.2 before\u00a024.2R2-EVO.  \n  \n  \nJunos OS Evolved:  \n  *  All versions before 21.2R3-S8-EVO,   \n  *  from 21.4 before 21.4R3-S8-EVO,  \n  *  from 22.2 before 22.2R3-S4-EVO,   \n  *  from 22.3 before 22.3R3-S3-EVO,   \n  *  from 22.4 before 22.4R3-S3-EVO,  \n  \n  *  from 23.2 before 23.2R2-S1-EVO,   \n  *  from 23.4 before 23.4R1-S2, 23.4R2,  \n  *  from 24.2 before 24.2R2-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/681"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "initial_release_date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-12T11:43:27.625Z", "date_only": false, "value": "2024-07-12T11:43:27.625950Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0290", "record": "NCSC-2024-0290", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-12T11:43:27.625Z", "date_only": false, "value": "2024-07-12T11:43:27.625950Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0290", "record": "NCSC-2024-0290", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-12T11:43:27.625Z", "date_only": false, "value": "2024-07-12T11:43:27.625950Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0290", "record": "NCSC-2024-0290", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-02T04:26:15.913Z", "date_only": false, "value": "2024-08-02T04:26:15.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-39549", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-02T21:09:45.677Z", "date_only": false, "value": "2024-10-02T21:09:45.677Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / juniper", "record": "cve-2024-39549", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-03T00:30:40Z", "date_only": false, "value": "2024-10-03T00:30:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HW78-GPFH-VW3Q", "record": "GHSA-HW78-GPFH-VW3Q", "field": "modified"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": false, "value": "2024-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "last_revision_date"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": false, "value": "2024-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "revisions.1.revision_date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-12T09:31:28.569Z", "date_only": false, "value": "2024-11-12T09:31:28.569+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-05T15:36:59.984Z", "date_only": false, "value": "2025-02-05T15:36:59.984391Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113952018883330797", "record": "CVE-2024-39549", "field": "creation_timestamp", "uuid": "12aaab56-5085-4476-abf8-a13ce03595cc", "url": "https://infosec.exchange/users/cve/statuses/113952018883330797"}, {"timestamp": "2025-02-05T16:16:01.149Z", "date_only": false, "value": "2025-02-05T16:16:01.149163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgxsjbsnx2r", "record": "CVE-2024-39549", "field": "creation_timestamp", "uuid": "e97c69a3-1e65-4c15-9abf-baa9e7fcea81", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgxsjbsnx2r"}, {"timestamp": "2025-02-05T19:09:22Z", "date_only": false, "value": "2025-02-05T19:09:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17314", "record": "CVE-2024-39549", "field": "creation_timestamp", "uuid": "aa557bdc-6ae6-47d0-aca0-3d907a342948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39564 - Juniper Junos OS/ Junos OS Evolved Double-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-39564 \nPublished : Feb. 5, 2025, 4:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : This is a similar, but different vulnerability than the issue reported as CVE-2024-39549.  \n  \nA\u00a0double-free vulnerability\u00a0in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This double free of memory is causing an rpd crash, leading to a Denial of Service (DoS).  \n  \n  \nThis issue affects:  \n  \nJunos OS:\u00a0  *  from 22.4 before 22.4R3-S4.  \n  \n  \nJunos OS Evolved:  *  from 22.4 before 22.4R3-S4-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17314"}, {"timestamp": "2025-02-26T18:16:20.812Z", "date_only": false, "value": "2025-02-26T18:16:20.812180Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-39549", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-26T18:16:20.812Z", "date_only": false, "value": "2025-02-26T18:16:20.812180Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39549", "record": "FKIE_CVE-2024-39549", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-26T18:16:27.497Z", "date_only": false, "value": "2025-02-26T18:16:27.497Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-39549", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-26T18:16:27.497Z", "date_only": false, "value": "2025-02-26T18:16:27.497Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-39549", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-26T18:24:06Z", "date_only": false, "value": "2025-02-26T18:24:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5562", "record": "CVE-2024-39549", "field": "creation_timestamp", "uuid": "505c54df-7fa3-4b73-b0b1-cac78069c736", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-39564\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: This is a similar, but different vulnerability than the issue reported as CVE-2024-39549.\n\nA\u00a0double-free vulnerability\u00a0in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This double free of memory is causing an rpd crash, leading to a Denial of Service (DoS).\n\n\nThis issue affects:\n\nJunos OS:\u00a0  *  from 22.4 before 22.4R3-S4.\n\n\nJunos OS Evolved:  *  from 22.4 before 22.4R3-S4-EVO.\n\ud83d\udccf Published: 2025-02-05T15:31:23.063Z\n\ud83d\udccf Modified: 2025-02-26T18:16:35.494Z\n\ud83d\udd17 References:\n1. https://supportportal.juniper.net/JSA83011", "url": "https://t.me/DarkWebInformer_CVEAlerts/5562"}, {"timestamp": "2025-02-26T18:24:07Z", "date_only": false, "value": "2025-02-26T18:24:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5563", "record": "CVE-2024-39549", "field": "creation_timestamp", "uuid": "877c9071-0923-47bb-b97d-df9c1f383f36", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-39549\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of\u00a0Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to log the bad path attribute. This memory is not properly freed in all circumstances, leading to a Denial of Service (DoS).\n\nConsumed memory can be freed by manually restarting Routing Protocol Daemon (rpd).\n\nMemory utilization could be monitored by:\u00a0\nuser@host> show system memory or show system monitor memory status\n\nThis issue affects:\n\nJunos OS:\u00a0  *  All versions before 21.2R3-S8,\u00a0\n  *  from 21.4 before 21.4R3-S8,\n\n  *  from 22.2 before 22.2R3-S4,\u00a0\n  *  from 22.3 before 22.3R3-S3,\u00a0\n  *  from 22.4 before 22.4R3-S3,\n  *  from 23.2 before 23.2R2-S1,\u00a0\n  *  from 23.4 before 23.4R1-S2, 23.4R2.\n\n\nJunos OS Evolved:\n  *  All versions before 21.2R3-S8-EVO, \n  *  from 21.4 before 21.4R3-S8-EVO,\n  *  from 22.2 before 22.2R3-S4-EVO, \n  *  from 22.3 before 22.3R3-S3-EVO, \n  *  from 22.4 before 22.4R3-S3-EVO,\n\n  *  from 23.2 before 23.2R2-S1-EVO, \n  *  from 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO.\n\ud83d\udccf Published: 2024-07-11T16:27:19.238Z\n\ud83d\udccf Modified: 2025-02-26T18:16:27.497Z\n\ud83d\udd17 References:\n1. https://supportportal.juniper.net/JSA83011", "url": "https://t.me/DarkWebInformer_CVEAlerts/5563"}, {"timestamp": "2026-06-17T07:42:11.727Z", "date_only": false, "value": "2026-06-17T07:42:11.727", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39549", "record": "FKIE_CVE-2024-39549", "field": "lastModified"}]}