Riskcovery

CVE-2025-21597

Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed

State
Published
Severity
6.0 Medium
Published
Apr 9, 2025
Updated
Apr 10, 2025
Reserved
Dec 26, 2024

Read the record on cve.org

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer to cause Denial of Service (DoS).

On all Junos OS and Junos OS Evolved platforms, when BGP rib-sharding and update-threading are configured, and a BGP peer flap is done with specific timing, rpd crashes and restarts. Continuous peer flapping at specific time intervals will result in a sustained Denial of Service (DoS) condition.

This issue affects eBGP and iBGP, in both IPv4 and IPv6 implementations. This issue requires a remote attacker to have at least one established BGP session. The issue can occur with or without logical-systems enabled.

This issue affects: Junos OS:

* All versions before 20.4R3-S8, * 21.2 versions before 21.2R3-S6,

* 21.3 versions before 21.3R3-S5, * 21.4 versions before 21.4R3-S4, * 22.1 versions before 22.1R3-S3, * 22.2 versions before 22.2R3-S1, * 22.3 versions before 22.3R3, * 22.4 versions before 22.4R3.

Junos OS Evolved:

* All versions before 21.2R3-S6-EVO, * 21.3-EVO versions before 21.3R3-S5-EVO, * 21.4-EVO versions before 21.4R3-S4-EVO, * 22.1-EVO versions before 22.1R3-S3-EVO, * 22.2-EVO versions before :22.2R3-S1-EVO, * 22.3-EVO versions before 22.3R3-EVO, * 22.4-EVO versions before 22.4R3-EVO.

Scores

CVSSScoreVectorSource
4.06.0 MediumCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/R:Ajuniper
3.15.3 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
Junos OSJuniper Networks
  • before 20.4R3-S8Affected
  • 21.2 to before 21.2R3-S6Affected
  • 21.3 to before 21.3R3-S5Affected
  • 21.4 to before 21.4R3-S4Affected
  • 22.1 to before 22.1R3-S3Affected
  • 22.2 to before 22.2R3-S1Affected
  • 22.3 to before 22.3R3Affected
  • 22.4 to before 22.4R3Affected
Junos OS EvolvedJuniper Networks
  • before 21.2R3-S6-EVOAffected
  • 21.3-EVO to before 21.3R3-S5-EVOAffected
  • 21.4-EVO to before 21.4R3-S4-EVOAffected
  • 22.1-EVO to before 22.1R3-S3-EVOAffected
  • 22.2-EVO to before 22.2R3-S1-EVOAffected
  • 22.3-EVO to before 22.3R3-EVOAffected
  • 22.4-EVO to before 22.4R3-EVOAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.