Improper Check for Exceptional Conditions in Junos OS DHCP Service by Juniper Networks

CVE-2025-59960

What is CVE-2025-59960?

An improper check in the Juniper DHCP service allows a DHCP client in one subnet to deplete address pools of other subnets, resulting in Denial of Service (DoS) for users relying on those pools. When the DHCP relay agent processes client requests in 'forward-only' mode with Option 82, it should reject certain packets unless 'trust-option82' is explicitly enabled. Instead, it forwards these non-compliant requests, leading to unintended exhaustion of the DHCP server’s address pool. This vulnerability affects various versions of Junos OS and Junos OS Evolved, creating significant risks for network availability and reliability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References