Buffer Copy Vulnerability in Juniper Networks Junos OS Affects MX and SRX Series

CVE-2025-52960

What is CVE-2025-52960?

A vulnerability exists in the Session Initialization Protocol (SIP) ALG of Juniper Networks' Junos OS, affecting MX Series and SRX Series devices. This flaw allows an unauthenticated, network-based attacker to induce a Denial of Service (DoS) condition by sending specific SIP packets when memory utilization is high. Although the system attempts to recover automatically, service stability may be severely disrupted. The sustained receipt of these packets during high utilization can lead to continuous service interruptions, underscoring the importance of prompt updates to secured versions.

References