Improper Encoding Vulnerability in Junos OS by Juniper Networks

CVE-2025-30657

Summary

An improper encoding vulnerability exists within the Sampling Route Record Daemon (SRRD) of Junos OS, allowing unauthenticated, network-based attackers to disrupt service. Specifically, when a device configured for flow-monitoring receives a malformed BGP update message, it is processed correctly by the routing protocol daemon (rpd), but an encoding error during its transfer to the SRRD causes the service to crash. This leads to temporary disruption of jflow processing until it's automatically restarted, although it does not affect traffic forwarding itself. To mitigate this vulnerability, it is essential for users to ensure their systems are updated to versions that are not impacted.

References