Junos OS (SRX firewalls)
CVE-2024-21614: A specific query via DREND causes rpd crash
An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Junos OS 22.2 | 22.2R2-S2, 22.2R3 or later |
| Junos OS 22.3 | 22.3R2, 22.3R3 or later |
| Junos OS Evolved 22.2 | 22.2R2-S2-EVO, 22.2R3-EVO or later |
| Junos OS Evolved 22.3 | 22.3R2-EVO, 22.3R3-EVO or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).
On all Junos OS and Junos OS Evolved platforms, when NETCONF and gRPC are enabled, and a specific query is executed via Dynamic Rendering (DREND), rpd will crash and restart. Continuous execution of this specific query will cause a sustained Denial of Service (DoS) condition.
This issue affects:
Juniper Networks Junos OS
- 22.2 versions earlier than 22.2R2-S2, 22.2R3;
- 22.3 versions earlier than 22.3R2, 22.3R3.
Juniper Networks Junos OS Evolved
- 22.2 versions earlier than 22.2R2-S2-EVO, 22.2R3-EVO;
- 22.3 versions earlier than 22.3R2-EVO, 22.3R3-EVO.
This issue does not affect Juniper Networks:
Junos OS versions earlier than 22.2R1;
Junos OS Evolved versions earlier than 22.2R1-EVO.
Am I affected?
For this issue to occur, NETCONF and gRPC should be enabled.
[ netconf ssh ] [ system services extension-service request-response grpc ]
Workarounds
There are no known workarounds for this issue.
Exploitation
Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.