Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-52984

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause impact to the availability of the device. When static route points to a reject next hop and a gNMI query is processed for that static route, rpd crashes and restarts. This issue affects: Junos OS:  * all versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10,  * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R1-S2, 24.2R2; Junos OS Evolved: * all versions before 22.4R3-S7-EVO, * 23.2-EVO versions before 23.2R2-S3-EVO, * 23.4-EVO versions before 23.4R2-S4-EVO, * 24.2-EVO versions before 24.2R2-EVO.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 21.2R3-S9affected
  • 21.4 to < 21.4R3-S10affected
  • 22.2 to < 22.2R3-S6affected
  • 22.4 to < 22.4R3-S6affected
  • 23.2 to < 23.2R2-S3affected
  • 23.4 to < 23.4R2-S4affected
  • 24.2 to < 24.2R1-S2, 24.2R2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 22.4R3-S7-EVOaffected
  • 23.2-EVO to < 23.2R2-S3-EVOaffected
  • 23.4-EVO to < 23.4R2-S4-EVOaffected
  • 24.2-EVO to < 24.2R2-EVOaffected

References