Vulnerability · Published Jul 11, 2025 · Assigned by juniper
CVE-2025-52958Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash
Medium 5.3
In plain English
A medium-severity security flaw in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Official description
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).On all Junos OS and Junos OS Evolved devices, when route validation is enabled, a rare condition during BGP initial session establishment can lead to an rpd crash and restart. This occurs specifically when the connection request fails during error-handling scenario. Continued session establishment failures leads to a sustained DoS condition. This issue affects Junos OS: * All versions before 22.2R3-S6, * from 22.4 before 22.4R3-S6, * from 23.2 before 23.2R2-S3, * from 23.4 before 23.4R2-S4, * from 24.2 before 24.2R2; Junos OS Evolved: * All versions before 22.2R3-S6-EVO, * from 22.4 before 22.4R3-S6-EVO, * from 23.2 before 23.2R2-S3-EVO, * from 23.4 before 23.4R2-S4-EVO, * from 24.2 before 24.2R2-EVO.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | 0 – before 22.2R3-S622.4 – before 22.4R3-S623.2 – before 23.2R2-S323.4 – before 23.4R2-S424.2 – before 24.2R2 |
| Juniper Networks | Junos OS Evolved | 0 – before 22.2R3-S6-EVO22.4 – before 22.4R3-S6-EVO23.2 – before 23.2R2-S3-EVO23.4 – before 23.4R2-S4-EVO24.2 – before 24.2R2-EVO |
Weakness: CWE-617 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://supportportal.juniper.net/JSA100066 vendor-advisory