Denial of Service Vulnerability in Juniper Networks Junos OS on SRX4700 Devices

CVE-2025-59964

What is CVE-2025-59964?

A vulnerability exists in the Packet Forwarding Engine (PFE) of Juniper Networks' Junos OS which can be exploited by an unauthenticated, network-based attacker. When the forwarding-options sampling feature is enabled, certain traffic directed to the Routing Engine (RE) can result in a crash and restart of the Flexible PIC Concentrator (FPC). This leads to a Denial of Service (DoS) condition, which can be prolonged by continuous reception of traffic targeting the RE. This issue affects both IPv4 and IPv6 traffic, impacting device availability significantly.

References