PT-2025-41409 · Juniper Networks · Junos Space
CVE-2025-59975
·
Publicado
2025-10-09
·
Atualizado
2025-12-23
CVSS v4.0
8.7
Alta
| Vetor | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:X |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos Space versions prior to 22.2R1 Patch V3
Juniper Networks Junos Space versions 23.1 before 23.1R1 Patch V3
Description
An Uncontrolled Resource Consumption issue exists in the HTTP daemon (
httpd) of Juniper Networks Junos Space. An unauthenticated network-based attacker can flood the system with inbound API calls, leading to resource exhaustion and a Denial of Service (DoS). This resource consumption specifically involves exhausting all available file handles, blocking access via SSH and the web user interface (WebUI). A manual reboot of the system is required to restore functionality. The affected component is the HTTP daemon. The API calls are used to trigger the resource consumption.Recommendations
Update to Junos Space 22.2R1 Patch V3 or later.
Update to Junos Space 23.1R1 Patch V3 or later.
Correção
DoS
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Junos Space