{"metadata": {"vulnerability": "cve-2024-39556", "count": 31, "kinds": {"milestone": 9, "sighting": 2, "kev": 0, "other": 20}}, "data": [{"timestamp": "2024-06-25T15:12:53.247Z", "date_only": false, "value": "2024-06-25T15:12:53.247Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-39556", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": true, "value": "2024-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-10T16:00:00Z", "date_only": false, "value": "2024-07-10T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "cve-2024-39556", "field": "containers.cna.datePublic"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-10T22:38:44.894Z", "date_only": false, "value": "2024-07-10T22:38:44.894Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-39556", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-10T22:38:44.894Z", "date_only": false, "value": "2024-07-10T22:38:44.894Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / juniper", "record": "cve-2024-39556", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-10T23:15:12Z", "date_only": false, "value": "2024-07-10T23:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4FVX-2MXH-X7V7", "record": "GHSA-4FVX-2MXH-X7V7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-10T23:15:12.133Z", "date_only": false, "value": "2024-07-10T23:15:12.133", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39556", "record": "FKIE_CVE-2024-39556", "field": "published"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": true, "value": "2024-07-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "vendor_advisories.28.published_at"}, {"timestamp": "2024-07-11T00:32:51Z", "date_only": false, "value": "2024-07-11T00:32:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4FVX-2MXH-X7V7", "record": "GHSA-4FVX-2MXH-X7V7", "field": "published"}, {"timestamp": "2024-07-11T01:35:30Z", "date_only": false, "value": "2024-07-11T01:35:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/610", "record": "CVE-2024-39556", "field": "creation_timestamp", "uuid": "1f0f83ea-90d2-4167-b682-c47d962d4893", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39556 - A Stack-Based Buffer Overflow vulnerability in Jun\", \n  \"Content\": \"CVE ID : CVE-2024-39556 \nPublished : July 10, 2024, 11:15 p.m. | 16\u00a0minutes ago \nDescription : A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of Service (DoS) or privileged code execution.  \n  \nBy exploiting the 'set security certificates' command with a crafted certificate file, a malicious attacker with access to the CLI could cause a crash of the command management daemon (mgd), limited to the local user's command interpreter, or potentially trigger a stack-based buffer overflow.  \n  \n  \nThis issue affects:  \n  \n\u00a0Junos OS:   \n  \n  \n  *  All versions before 21.4R3-S7,   \n  *  from 22.1 before 22.1R3-S6,   \n  *  from 22.2 before 22.2R3-S4,   \n  *  from 22.3 before 22.3R3-S3,   \n  *  from 22.4 before 22.4R3-S2,   \n  *  from 23.2 before 23.2R2,   \n  *  from 23.4 before 23.4R1-S1, 23.4R2;\u00a0  \n  \n  \n  \n  \nJunos OS Evolved:   \n  \n  \n  *  All versions before 21.4R3-S7-EVO,   \n  *  from 22.1-EVO before 22.1R3-S6-EVO,   \n  *  from 22.2-EVO before 22.2R3-S4-EVO,   \n  *  from 22.3-EVO before 22.3R3-S3-EVO,   \n  *  from 22.4-EVO before 22.4R3-S2-EVO,   \n  *  from 23.2-EVO before 23.2R2-EVO,   \n  *  from 23.4-EVO before 23.4R1-S1-EVO, 23.4R2-EVO. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/610"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "initial_release_date"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-39556", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39556", "record": "FKIE_CVE-2024-39556", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-12T00:00:00Z", "date_only": false, "value": "2024-07-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-12T11:43:27.625Z", "date_only": false, "value": "2024-07-12T11:43:27.625950Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0290", "record": "NCSC-2024-0290", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-12T11:43:27.625Z", "date_only": false, "value": "2024-07-12T11:43:27.625950Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0290", "record": "NCSC-2024-0290", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-12T11:43:27.625Z", "date_only": false, "value": "2024-07-12T11:43:27.625950Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0290", "record": "NCSC-2024-0290", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-13T03:55:17.897Z", "date_only": false, "value": "2024-07-13T03:55:17.897Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-39556", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T04:26:15.938Z", "date_only": false, "value": "2024-08-02T04:26:15.938Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-39556", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T04:26:15.938Z", "date_only": false, "value": "2024-08-02T04:26:15.938Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-39556", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": false, "value": "2024-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "last_revision_date"}, {"timestamp": "2024-10-15T00:00:00Z", "date_only": false, "value": "2024-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0575", "record": "CERTFR-2024-AVI-0575", "field": "revisions.1.revision_date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-12T09:31:28.569Z", "date_only": false, "value": "2024-11-12T09:31:28.569+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1591", "record": "WID-SEC-W-2024-1591", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-07T21:30:59Z", "date_only": false, "value": "2025-02-07T21:30:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4FVX-2MXH-X7V7", "record": "GHSA-4FVX-2MXH-X7V7", "field": "modified"}, {"timestamp": "2025-02-07T22:03:09Z", "date_only": false, "value": "2025-02-07T22:03:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3844", "record": "CVE-2024-39556", "field": "creation_timestamp", "uuid": "1ff44107-c395-4aa8-89a1-1f46f56356de", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-39556\n\ud83d\udd25 CVSS Score: 6.3 (CVSS_V3)\n\ud83d\udd39 Description: A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of Service (DoS) or privileged code execution.\n\nBy exploiting the 'set security certificates' command with a crafted certificate file, a malicious attacker with access to the CLI could cause a crash of the command management daemon (mgd), limited to the local user's command interpreter, or potentially trigger a stack-based buffer overflow.\n\n\nThis issue affects:\n\n\u00a0Junos OS: \n\n\n  *  All versions before 21.4R3-S7, \n  *  from 22.1 before 22.1R3-S6, \n  *  from 22.2 before 22.2R3-S4, \n  *  from 22.3 before 22.3R3-S3, \n  *  from 22.4 before 22.4R3-S2, \n  *  from 23.2 before 23.2R2, \n  *  from 23.4 before 23.4R1-S1, 23.4R2;\u00a0\n\n\n\n\nJunos OS Evolved: \n\n\n  *  All versions before 21.4R3-S7-EVO, \n  *  from 22.1-EVO before 22.1R3-S6-EVO, \n  *  from 22.2-EVO before 22.2R3-S4-EVO, \n  *  from 22.3-EVO before 22.3R3-S3-EVO, \n  *  from 22.4-EVO before 22.4R3-S2-EVO, \n  *  from 23.2-EVO before 23.2R2-EVO, \n  *  from 23.4-EVO before 23.4R1-S1-EVO, 23.4R2-EVO.\n\ud83d\udccf Published: 2024-07-11T00:32:51Z\n\ud83d\udccf Modified: 2025-02-07T21:30:59Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-39556\n2. https://supportportal.juniper.net/JSA83016", "url": "https://t.me/DarkWebInformer_CVEAlerts/3844"}, {"timestamp": "2026-06-17T07:42:13.170Z", "date_only": false, "value": "2026-06-17T07:42:13.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-39556", "record": "FKIE_CVE-2024-39556", "field": "lastModified"}]}