{"uuid": "5a7049b2-a969-44a8-9895-0017bf414d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-39555", "type": "seen", "source": "https://t.me/cvedetector/614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39555 - An Improper Handling of Exceptional Conditions vul\", \n  \"Content\": \"CVE ID : CVE-2024-39555 \nPublished : July 10, 2024, 11:15 p.m. | 16\u00a0minutes ago \nDescription : An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specific malformed BGP update message to cause the session to reset, resulting in a Denial of Service (DoS).  Continued receipt and processing of these malformed BGP update messages will create a sustained Denial of Service (DoS) condition.  \n  \nUpon receipt of a BGP update message over an established BGP session containing a specifically malformed tunnel encapsulation attribute, when segment routing is enabled, internal processing of the malformed attributes within the update results in improper parsing of remaining attributes, leading to session reset:  \n  \nBGP SEND Notification code 3 (Update Message Error) subcode 1 (invalid attribute list)  \n  \nOnly systems with segment routing enabled are vulnerable to this issue.  \n  \nThis issue affects eBGP and iBGP, in both IPv4 and IPv6 implementations, and requires a remote attacker to have at least one established BGP session.  \n  \nThis issue affects:  \n  \nJunos OS:   \n  \n  \n  *  All versions before 21.4R3-S8,   \n  *  from 22.2 before 22.2R3-S4,   \n  *  from 22.3 before 22.3R3-S3,   \n  *  from 22.4 before 22.4R3-S3,   \n  *  from 23.2 before 23.2R2-S1,   \n  *  from 23.4 before 23.4R1-S2, 23.4R2.  \n  \n  \nJunos OS Evolved:\u00a0  \n  \n  *  All versions before 21.4R3-S8-EVO,   \n  *  from 22.2-EVO before 22.2R3-S4-EVO,   \n  *  from 22.3-EVO before 22.3R3-S3-EVO,   \n  *  from 22.4-EVO before 22.4R3-S3-EVO,   \n  *  from 23.2-EVO before 23.2R2-S1-EVO,   \n  *  from 23.4-EVO before 23.4R1-S2-EVO, 23.4R2-EVO. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T01:35:37.000000Z"}