CVE-2024-39548
Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak
An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their own and must be manually restarted.
This issue affects both IPv4 and IPv6.
Changes in memory usage can be monitored using the following CLI command: user@device> show system memory node <fpc slot> | grep evo-aftmann This issue affects Junos OS Evolved:
- All versions before 21.2R3-S8-EVO,
- 21.3 versions before 21.3R3-S5-EVO,
- 21.4 versions before 21.4R3-S5-EVO,
- 22.1 versions before 22.1R3-S4-EVO,
- 22.2 versions before 22.2R3-S4-EVO,
- 22.3 versions before 22.3R3-S3-EVO,
- 22.4 versions before 22.4R2-S2-EVO, 22.4R3-EVO,
- 23.2 versions before 23.2R1-S1-EVO, 23.2R2-EVO.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak
An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their own and must be manually restarted.
This issue affects both IPv4 and IPv6.
Changes in memory usage can be monitored using the following CLI command: user@device> show system memory node <fpc slot> | grep evo-aftmann This issue affects Junos OS Evolved:
- All versions before 21.2R3-S8-EVO,
- 21.3 versions before 21.3R3-S5-EVO,
- 21.4 versions before 21.4R3-S5-EVO,
- 22.1 versions before 22.1R3-S4-EVO,
- 22.2 versions before 22.2R3-S4-EVO,
- 22.3 versions before 22.3R3-S3-EVO,
- 22.4 versions before 22.4R2-S2-EVO, 22.4R3-EVO,
- 23.2 versions before 23.2R1-S1-EVO, 23.2R2-EVO.
- Record
CVE-2024-39548- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/R:U - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2024-38074
An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their own and must be manually restarted.
This issue affects both IPv4 and IPv6.
Changes in memory usage can be monitored using the following CLI command: user@device> show system memory node <fpc slot> | grep evo-aftmann This issue affects Junos OS Evolved:
- All versions before 21.2R3-S8-EVO,
- 21.3 versions before 21.3R3-S5-EVO,
- 21.4 versions before 21.4R3-S5-EVO,
- 22.1 versions before 22.1R3-S4-EVO,
- 22.2 versions before 22.2R3-S4-EVO,
- 22.3 versions before 22.3R3-S3-EVO,
- 22.4 versions before 22.4R2-S2-EVO, 22.4R3-EVO,
- 23.2 versions before 23.2R1-S1-EVO, 23.2R2-EVO.
- Record
EUVD-2024-38074- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/R:U - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v47j-c7r7-829c
An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks...
An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their own and must be manually restarted.
This issue affects both IPv4 and IPv6.
Changes in memory usage can be monitored using the following CLI command: user@device> show system memory node <fpc slot> | grep evo-aftmann This issue affects Junos OS Evolved:
- All versions before 21.2R3-S8-EVO,
- 21.3 versions before 21.3R3-S5-EVO,
- 21.4 versions before 21.4R3-S5-EVO,
- 22.1 versions before 22.1R3-S4-EVO,
- 22.2 versions before 22.2R3-S4-EVO,
- 22.3 versions before 22.3R3-S3-EVO,
- 22.4 versions before 22.4R2-S2-EVO, 22.4R3-EVO,
- 23.2 versions before 23.2R1-S1-EVO, 23.2R2-EVO.
- Record
GHSA-v47j-c7r7-829c- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their own and must be manually restarted.
This issue affects both IPv4 and IPv6.
Changes in memory usage can be monitored using the following CLI command: user@device> show system memory node <fpc slot> | grep evo-aftmann This issue affects Junos OS Evolved:
- All versions before 21.2R3-S8-EVO,
- 21.3 versions before 21.3R3-S5-EVO,
- 21.4 versions before 21.4R3-S5-EVO,
- 22.1 versions before 22.1R3-S4-EVO,
- 22.2 versions before 22.2R3-S4-EVO,
- 22.3 versions before 22.3R3-S3-EVO,
- 22.4 versions before 22.4R2-S2-EVO, 22.4R3-EVO,
- 23.2 versions before 23.2R1-S1-EVO, 23.2R2-EVO.
- Record
CVE-2024-39548- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-39548 is a high vulnerability (CVSS 7.1) in Juniper Junos Os Evolved, published July 11, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. No source names a fixed version.