CVE-2024-30387

HIGH Year: 2024
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-820
View all →

Vulnerability Description

A Missing Synchronization vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on ACX5448 and ACX710 allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). If an interface flaps while the system gathers statistics on that interface, two processes simultaneously access a shared resource which leads to a PFE crash and restart. This issue affects Junos OS: * All versions before 20.4R3-S9, * 21.2 versions before 21.2R3-S5, * 21.3 versions before 21.3R3-S5, * 21.4 versions before 21.4R3-S4, * 22.1 versions before 22.1R3-S2, * 22.2 versions before 22.2R3-S2, * 22.3 versions before 22.3R2-S2, 22.3R3, * 22.4 versions before 22.4R2.

Related Vulnerabilities

CVE-2023-45084

MEDIUM
CVSS:6.1(Medium)

An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives d...

CWE-8202023

CVE-2025-1445

HIGH
CVSS:7.5(High)

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations...

CWE-8202025

CVE-2023-2801

MEDIUM
CVSS:5.3(Medium)

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of...

CWE-8202023

CVE-2024-49114

HIGH
CVSS:7.8(High)

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CWE-8202024

CVE-2025-47154

CRITICAL
CVSS:9.0(Critical)

LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted...

CWE-8202025

CVE-2024-49114

HIGH
CVSS:7.8(High)

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CWE-8202024