Product:
Junos OS
Summary
A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol (SIP) ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When memory utilization is high, and specific SIP packets are received, flowd crashes. Continuous receipt of these specific SIP packets can lead to a sustained DoS condition.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2025-52960 |
Exploitation
To exploit this vulnerability, an attacker must send specific SIP packets to the affected devices while the memory utilization is high. Although the attacker cannot control the memory utilization, the continuous sending of these packets can lead to a crash of the flowd process, resulting in a Denial of Service condition.
Affected Products
- Junos OS on MX Series: All versions before 22.4R3-S7
- Junos OS on SRX Series: All versions before 22.4R3-S7
- Junos OS from 23.2 before 23.2R2-S4
- Junos OS from 23.4 before 23.4R2-S5
- Junos OS from 24.2 before 24.2R2
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest versions of Junos OS that are not affected by this issue. Regular monitoring of network traffic for unusual SIP packets can also help in identifying potential exploitation attempts.