Improper Input Validation in Juniper DHCP Daemon Affects Junos OS

CVE-2025-30648

Summary

An improper input validation vulnerability in the Juniper DHCP Daemon (jdhcpd) within Junos OS and Junos OS Evolved can be exploited by unauthenticated, adjacent attackers, leading to a crashing of the jdhcpd process. This flaw allows attackers to send specifically crafted malformed DHCP packets, which can cause the service to become unavailable, resulting in a Denial of Service (DoS). Although the process will attempt to restart automatically, the incident may still disrupt network operations, especially when dhcp-security is enabled.

References