Improper Resource Shutdown in Juniper Networks Junos OS on MX Series Devices

CVE-2025-52982

What is CVE-2025-52982?

An improper resource shutdown or release vulnerability exists in the SIP ALG of Juniper Networks' Junos OS when used with MX Series devices that include MS-MPC. This flaw enables an unauthenticated, network-based attacker to trigger a sequence of SIP call events that can crash and restart the MS-MPC module, leading to significant disruption of services. The issue specifically impacts configurations with two or more service sets processing SIP calls, resulting in potential service interruptions. Affected versions include those prior to 21.2R3-S9, certain 21.4 versions from 21.4R1, 22.2 versions before 22.2R3-S6, and 22.4 versions before 22.4R3-S6. Subsequent releases of Junos OS do not exhibit this vulnerability.

References