Denial of Service Vulnerability in Juniper Networks Junos OS and Junos OS Evolved
CVE-2025-21595

7.1HIGH

Key Information:

Vendor
Juniper Networks
Status
Junos Os
Junos Os Evolved
Vendor
CVE Published:
9 April 2025

Badges

👾 Exploit Exists

Summary

A memory management issue in the Packet Forwarding Engine (PFE) within Juniper Networks' Junos OS and Junos OS Evolved poses a risk of Denial of Service (DoS). This vulnerability allows an unauthenticated adjacent attacker to send specific ARP packets over IPv4 networks or NDP packets over IPv6 networks, triggering kernel heap memory leaks that ultimately cause a failure and restart of the FPC. This problem is observed across various versions and is critical for maintaining service availability, particularly in EVPN-VXLAN deployments.

Affected Version(s)

Junos OS 0 < 21.2R3-S7

Junos OS 21.4 < 21.4R3-S4

Junos OS 22.2 < 22.2R3-S1

References

https://supportportal.juniper.net/JSA96450
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.