CVE-2024-39531
HIGHDescription
An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). If a value is configured for DDoS bandwidth or burst parameters for any protocol in a queue, all protocols which share the same queue will have their bandwidth or burst value changed to the new value. If, for example, OSPF was configured with a certain bandwidth value, ISIS would also be limited to this value. So inadvertently either the control plane is open for a high level of specific traffic which was supposed to be limited to a lower value, or the limit for a certain protocol is so low that chances to succeed with a volumetric DoS attack are significantly increased. This issue affects Junos OS Evolved on ACX 7000 Series: * All versions before 21.4R3-S7-EVO, * 22.1 versions before 22.1R3-S6-EVO, * 22.2 versions before 22.2R3-S3-EVO, * 22.3 versions before 22.3R3-S3-EVO, * 22.4 versions before 22.4R3-S2-EVO, * 23.2 versions before 23.2R2-EVO, * 23.4 versions before 23.4R1-S1-EVO, 23.4R2-EVO.
How to fix
TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Impact
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploit Intelligence
Low risk: more likely to be exploited than 36% of all known CVEs.
References
Related Vulnerabilities
Other CWE-229 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2022-24412 | High | 7.5 | 1.0% | - | - |
| CVE-2022-22562 | High | 7.5 | 0.9% | - | - |
| CVE-2022-4851 | Medium | 5.3 | 0.8% | - | Fix |
| CVE-2025-59032 | High | 7.5 | 0.7% | - | Fix |
| CVE-2022-3409 | High | 8.2 | 0.6% | - | - |
| CVE-2022-2809 | High | 8.2 | 0.6% | - | - |
Common questions
How do I fix CVE-2024-39531?
Upgrade junos os evolved to 21.4 or later.
Is CVE-2024-39531 being actively exploited?
Not that we know of. CVE-2024-39531 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 0.44% is the estimated probability that it will be exploited in the next 30 days. That is higher than 36% of all scored CVEs.
How severe is CVE-2024-39531?
CVE-2024-39531 has a CVSS v3 base score of 7.5, rated high. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.
What does CVE-2024-39531 affect?
Published advisories record a fix for junos os evolved (NVD). Only products with a sourced advisory are listed, so treat this as what we can cite rather than a complete inventory.
Embed a live status badge for CVE-2024-39531
Markdown
[](https://tridentstack.com/cve/CVE-2024-39531)HTML
<a href="https://tridentstack.com/cve/CVE-2024-39531"><img src="https://tridentstack.com/cve/badge/CVE-2024-39531.svg" alt="CVE-2024-39531"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-01-22.