Product:
Junos OS
Summary
An Access of Uninitialized Pointer vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attacker to cause rpd to crash and restart, leading to a Denial of Service. This issue can be triggered by continuous IGP route churn, resulting in repeated route re-resolution and an extended DoS condition.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6 | CVE-2025-59962 |
Exploitation
To exploit this vulnerability, an attacker must have access to the adjacent network and trigger indirect next-hop updates by causing continuous IGP route changes. This can be achieved by manipulating the routing environment to create a high frequency of route churn, which increases the likelihood of causing the rpd process to crash and restart.
Affected Products
- Junos OS: All versions before 21.4R3-S6, from 22.1 before 22.1R3-S6, from 22.2 before 22.2R3-S3, from 22.3 before 22.3R3-S3, from 22.4 before 22.4R3, from 23.2 before 23.2R2.
- Junos OS Evolved: All versions before 22.3R3-S3-EVO, from 22.4 before 22.4R3-EVO, from 23.2 before 23.2R2-EVO.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest versions of Junos OS and Junos OS Evolved that are not affected by this issue. Regular monitoring of routing protocols and minimizing unnecessary route churn can also help reduce the risk of exploitation.