PT-2024-10149 · Juniper Networks · Junos Evolved

Published

2024-12-26

·

Updated

2026-01-26

·

CVE-2025-21599

CVSS v4.0

8.7

High

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Junos OS Evolved versions 22.4-EVO through 22.4R3-S5-EVO Junos OS Evolved versions 23.2-EVO through 23.2R2-S2-EVO Junos OS Evolved versions 23.4-EVO through 23.4R2-S2-EVO Junos OS Evolved versions 24.2-EVO through 24.2R1-S2-EVO, 24.2R2-EVO
Description A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes kernel memory to not be freed, resulting in memory exhaustion leading to a system crash and Denial of Service (DoS). Continuous receipt and processing of these packets will continue to exhaust kernel memory, creating a sustained Denial of Service (DoS) condition. This issue only affects systems configured with IPv6.
Recommendations For versions 22.4-EVO through 22.4R3-S5-EVO, update to version 22.4R3-S5-EVO or later. For versions 23.2-EVO through 23.2R2-S2-EVO, update to version 23.2R2-S2-EVO or later. For versions 23.4-EVO through 23.4R2-S2-EVO, update to version 23.4R2-S2-EVO or later. For versions 24.2-EVO through 24.2R1-S2-EVO, 24.2R2-EVO, update to a version later than 24.2R1-S2-EVO, 24.2R2-EVO. As a temporary workaround, consider disabling the jtd driver until a patch is available. Restrict access to the vulnerable jtd driver to minimize the risk of exploitation. Avoid using IPv6 packets in the affected API endpoint until the issue is resolved.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-00475
CVE-2025-21599

Affected Products

Junos Evolved