PT-2025-15865 · Juniper Networks · Junos

CVE-2025-30658 · Publicado 2025-04-09 · Atualizado 2025-04-11

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions 21.4 prior to 21.4R3-S10 Junos OS versions 22.2 prior to 22.2R3-S6 Junos OS versions 22.4 prior to 22.4R3-S6 Junos OS versions 23.2 prior to 23.2R2-S3 Junos OS versions 23.4 prior to 23.4R2-S3 Junos OS versions 24.2 prior to 24.2R2

Description: A Missing Release of Memory after Effective Lifetime issue in the Anti-Virus processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). This occurs when a server sends specific content in the HTTP body of a response to a client request, causing packets to be queued by Anti-Virus processing in Juniper Buffers (jbufs) that are never released. When these jbufs are exhausted, the device stops forwarding all transit traffic. A jbuf memory leak can be noticed from logs indicating high jbuf pool utilization levels.

Recommendations: To recover from this issue, manually reboot the affected device to free the leaked jbufs for the following versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions 21.4 prior to 21.4R3-S10 Junos OS versions 22.2 prior to 22.2R3-S6 Junos OS versions 22.4 prior to 22.4R3-S6 Junos OS versions 23.2 prior to 23.2R2-S3 Junos OS versions 23.4 prior to 23.4R2-S3 Junos OS versions 24.2 prior to 24.2R2 As a temporary workaround, consider disabling Anti-Virus processing until a patch is available. Restrict access to the affected device to minimize the risk of exploitation. Monitor jbuf pool utilization levels to detect potential memory leaks.

Correção

DoS

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

BDU:2025-05188

CVE-2025-30658

Produtos afetados

Junos

Referências · 9

• https://twitter.com/CVEnew/status/1910073369581486523 · Publicação no Twitter
• https://supportportal.juniper.net/JSA96469 · Aviso do Fabricante
• https://twitter.com/cybercronai/status/1910494404936163663 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-05188 · Nota de Segurança
• https://t.me/cvedetector/22593 · Publicação no Telegram
• https://juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/atp-cloud-services-anti-virus.html · Nota
• https://osv.dev/vulnerability/CVE-2025-30658 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-30658 · Nota de Segurança
• https://t.me/cvetracker/21269 · Publicação no Telegram