Product:
Junos OS
Summary
A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS on SRX4700 devices allows an unauthenticated, network-based attacker to cause a Denial of Service. When forwarding-options sampling is enabled, receipt of any traffic destined to the Routing Engine by the PFE line card leads to an FPC crash and restart, resulting in a Denial of Service. Continued receipt and processing of any traffic leading to the RE by the PFE line card will create a sustained Denial of Service condition.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2025-59964 |
Exploitation
An attacker can exploit this vulnerability by sending traffic to the Routing Engine through the PFE line card while forwarding-options sampling is enabled. This will cause the FPC to crash and restart, leading to a Denial of Service. By continuously sending such traffic, the attacker can maintain a sustained Denial of Service condition on the affected device.
Affected Products
- Junos OS on SRX4700: from 24.4 before 24.4R1-S3, 24.4R2
Mitigation
To mitigate this vulnerability, it is recommended to disable forwarding-options sampling on affected devices or apply the necessary patches provided by Juniper Networks. Regularly updating the software to the latest version can also help protect against this and other vulnerabilities.