vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-21616

Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail

HIGH
7.5
CVSS Score
Published: January 12, 2024 at 12:56 AM UTC
Updated: June 17, 2026 at 07:09 AM UTC
1 product affected across 1 vendorJunos

Using Junos OS by Juniper Networks?

Get instant alerts when new vulnerabilities affect Junos OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.5%
SSVC
No known exploit

Description

An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a specific SIP packet is received and processed, NAT IP allocation fails for genuine traffic, which causes Denial of Service (DoS). Continuous receipt of this specific SIP ALG packet will cause a sustained DoS condition. NAT IP usage can be monitored by running the following command. user@srx> show security nat resource-usage source-pool <source_pool_name> Pool name: source_pool_name .. Address Factor-index Port-range Used Avail Total Usage X.X.X.X 0 Single Ports 50258 52342 62464 96% <<<<< - Alg Ports 0 2048 2048 0% This issue affects: Juniper Networks Junos OS on MX Series and SRX Series * All versions earlier than 21.2R3-S6; * 21.3 versions earlier than 21.3R3-S5; * 21.4 versions earlier than 21.4R3-S5; * 22.1 versions earlier than 22.1R3-S4; * 22.2 versions earlier than 22.2R3-S3; * 22.3 versions earlier than 22.3R3-S1; * 22.4 versions earlier than 22.4R2-S2, 22.4R3; * 23.2 versions earlier than 23.2R1-S1, 23.2R2.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos· Juniper Networks
95%
v < 21.2R3-S621.3 ≤ v < 21.3R3-S521.4 ≤ v < 21.4R3-S522.1 ≤ v < 22.1R3-S422.2 ≤ v < 22.2R3-S322.3 ≤ v < 22.3R3-S122.4 ≤ v < 22.4R2-S2, 22.4R323.2 ≤ v < 23.2R1-S1, 23.2R221.221.2 r121.2 r1-s121.2 r1-s221.2 r221.2 r2-s121.2 r2-s221.2 r321.2 r3-s121.2 r3-s221.2 r3-s321.2 r3-s421.2 r3-s521.321.3 r121.3 r1-s121.3 r1-s221.3 r221.3 r2-s121.3 r2-s221.3 r321.3 r3-s121.3 r3-s221.3 r3-s321.3 r3-s421.421.4 r121.4 r1-s121.4 r1-s221.4 r221.4 r2-s121.4 r2-s221.4 r321.4 r3-s121.4 r3-s221.4 r3-s321.4 r3-s422.122.1 r122.1 r1-s122.1 r1-s222.1 r222.1 r2-s122.1 r2-s222.1 r322.1 r3-s122.1 r3-s222.1 r3-s322.222.2 r122.2 r1-s122.2 r1-s222.2 r222.2 r2-s122.2 r2-s222.2 r322.2 r3-s122.2 r3-s222.322.3 r122.3 r1-s122.3 r1-s222.3 r222.3 r2-s122.3 r2-s222.3 r322.422.4 r122.4 r1-s122.4 r1-s222.4 r222.4 r2-s123.223.2 r1
Affected range stops below 21.2R3-S6, so it looks safe — our inference, not a vendor statement
Affected range stops below 21.3R3-S5, so it looks safe — our inference, not a vendor statement
Affected range stops below 21.4R3-S5, so it looks safe — our inference, not a vendor statement
Affected range stops below 22.1R3-S4, so it looks safe — our inference, not a vendor statement
Affected range stops below 22.2R3-S3, so it looks safe — our inference, not a vendor statement
Affected range stops below 22.3R3-S1, so it looks safe — our inference, not a vendor statement
Affected range stops below 22.4R2-S2, 22.4R3, so it looks safe — our inference, not a vendor statement
Affected range stops below 23.2R1-S1, 23.2R2, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

Vendor Advisory
Source: [email protected]
https://supportportal.juniper.net/JSA75757
Technical DescriptionThird Party Advisory
Source: [email protected]
https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHjuniper
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-1286NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card