Denial of Service Vulnerability in Juniper Networks Junos OS and Junos OS Evolved

CVE-2025-21595

What is CVE-2025-21595?

A memory management issue in the Packet Forwarding Engine (PFE) within Juniper Networks' Junos OS and Junos OS Evolved poses a risk of Denial of Service (DoS). This vulnerability allows an unauthenticated adjacent attacker to send specific ARP packets over IPv4 networks or NDP packets over IPv6 networks, triggering kernel heap memory leaks that ultimately cause a failure and restart of the FPC. This problem is observed across various versions and is critical for maintaining service availability, particularly in EVPN-VXLAN deployments.

References