PT-2025-29242 · Juniper Networks · Junos

Published 2025-07-09 · Updated 2025-07-11 · CVE-2025-52955

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/R:A/U:Green

Name of the Vulnerable Software and Affected Versions:

Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS version 21.4 Juniper Networks Junos OS version 22.2 Juniper Networks Junos OS versions from 22.4 through 22.4R3-S7 Juniper Networks Junos OS versions from 23.2 through 23.2R2-S3 Juniper Networks Junos OS versions from 23.4 through 23.4R2-S4 Juniper Networks Junos OS versions from 24.2 through 24.2R2

Description:

An incorrect calculation of buffer size in the routing protocol daemon (rpd) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory corruption, leading to an rpd crash. This occurs when a logical interface using a routing instance flaps continuously, sending specific updates to the jflow/sflow modules. Continued receipt of these updates can result in a sustained Denial of Service condition.

Recommendations:

Update to Junos OS version 21.2R3-S9 or later. Update to a version of Junos OS that is not 21.4. Update to a version of Junos OS that is not 22.2. Update to Junos OS version 22.4R3-S7 or later. Update to Junos OS version 23.2R2-S3 or later. Update to Junos OS version 23.4R2-S4 or later. Update to Junos OS version 24.2R2 or later.

Fix

DoS

Weakness Enumeration

CWE-131

Related Identifiers

BDU:2025-08740

CVE-2025-52955

Affected Products

Junos

References · 6

• https://osv.dev/vulnerability/CVE-2025-52955 · Vendor Advisory
• https://supportportal.juniper.net/JSA100062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52955 · Security Note
• https://bdu.fstec.ru/vul/2025-08740 · Security Note
• https://twitter.com/CVEnew/status/1943700212339368002 · Twitter Post
• https://t.me/cvetracker/27562 · Telegram Post