Buffer Access Vulnerability in Juniper Networks Junos OS DHCP Daemon
CVE-2025-21591

7.1HIGH

Key Information:

Vendor
Juniper Networks
Status
Junos Os
Vendor
CVE Published:
9 April 2025

Badges

👾 Exploit Exists

Summary

A buffer access vulnerability exists in the jdhcpd daemon of Juniper Networks Junos OS, triggered when DHCP snooping is enabled. An adjacent, unauthenticated attacker can exploit this flaw by sending a malformed DHCP packet, causing the jdhcp process to crash and resulting in a Denial of Service (DoS) condition. Sustained delivery of these malformed packets can lead to an extended service outage. This issue impacts specific versions of Junos OS while leaving earlier versions unaffected, and does not affect the vSRX Series or Junos OS Evolved.

Affected Version(s)

Junos OS 23.1R1 < 23.2R2-S3

Junos OS 23.4 < 23.4R2-S3

Junos OS 24.2 < 24.2R2

References

https://supportportal.juniper.net/JSA96448
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.