CVE-2025-59960
Severity CVSS v4.0:
MEDIUM
Type:
Unavailable / Other
Publication date:
15/01/2026
Last modified:
15/01/2026
Description
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a DHCP client in one subnet to exhaust the address pools of other subnets, leading to a Denial of Service (DoS) on the downstream DHCP server.<br />
<br />
<br />
<br />
By default, the DHCP relay agent inserts its own Option 82 information when forwarding client requests, optionally replacing any Option 82 information provided by the client. When a specific DHCP DISCOVER is received in &#39;forward-only&#39; mode with Option 82, the device should drop the message unless &#39;trust-option82&#39; is configured. Instead, the DHCP relay forwards these packets to the DHCP server unmodified, which uses up addresses in the DHCP server&#39;s address pool, ultimately leading to address pool exhaustion.<br />
<br />
This issue affects Junos OS: <br />
<br />
<br />
<br />
* all versions before 21.2R3-S10,<br />
* from 21.4 before 21.4R3-S12,<br />
* all versions of 22.2,<br />
* from 22.4 before 22.4R3-S8, <br />
* from 23.2 before 23.2R2-S5, <br />
* from 23.4 before 23.4R2-S6, <br />
* from 24.2 before 24.2R2-S2, <br />
* from 24.4 before 24.4R2, <br />
* from 25.2 before 25.2R1-S1, 25.2R2.<br />
<br />
<br />
<br />
<br />
Junos OS Evolved:<br />
<br />
<br />
<br />
* all versions before 21.4R3-S12-EVO, <br />
* all versions of 22.2-EVO,<br />
* from 22.4 before 22.4R3-S8-EVO, <br />
* from 23.2 before 23.2R2-S5-EVO, <br />
* from 23.4 before 23.4R2-S6-EVO, <br />
* from 24.2 before 24.2R2-S2-EVO, <br />
* from 24.4 before 24.4R2-EVO, <br />
* from 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO.
Impact
Base Score 4.0
6.30
Severity 4.0
MEDIUM
Base Score 3.x
7.40
Severity 3.x
HIGH