Main Vulnerability Database SB2025041122

SB2025041122 - Expired pointer dereference in Junos OS Evolved and Juniper Junos OS

Published: April 11, 2025 Updated: April 14, 2025

Security Bulletin ID SB2025041122

Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Adjecent network

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Expired pointer dereference (CVE-ID: CVE-2025-30653)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to expired pointer dereference error in Routing Protocol Daemon (rpd). A remote non-authenticated attacker can cause Denial of Service (DoS).

On all Junos OS and Junos OS Evolved platforms, when an MPLS Label-Switched Path (LSP) is configured with node-link-protection and transport-class, and an LSP flaps, rpd crashes and restarts.

Continuous flapping of LSP can cause a sustained Denial of Service (DoS) condition.

Remediation

Install update from vendor's website.

References

https://supportportal.juniper.net/s/article/2025-04-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-LSP-flap-in-a-specific-MPLS-LSP-scenario-leads-to-RPD-crash-CVE-2025-30653