Denial-of-Service Vulnerability in Juniper Networks Junos OS Routing Protocol Daemon

CVE-2025-60004

What is CVE-2025-60004?

An improper check for unusual or exceptional conditions in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a Denial-of-Service (DoS). This vulnerability is activated when an affected system receives a specific BGP EVPN update message over an established BGP session, resulting in a crash and subsequent restart of the rpd. Importantly, the flaw does not require a BGP EVPN configuration to exist, meaning that systems may still be vulnerable even without peers designated to send BGP EVPN updates.

References