CVE-2025-52955
Gravedad CVSS v4.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
11/07/2025
Última modificación:
11/07/2025
Descripción
*** Pendiente de traducción *** An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a memory corruption that leads to a rpd crash. <br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
When<br />
the logical interface using a routing instance flaps continuously, specific updates are sent to the jflow/sflow modules. This results in memory corruption, leading to an rpd crash and restart. <br />
<br />
<br />
Continued receipt of these specific updates will cause a sustained Denial of Service condition.<br />
<br />
<br />
This issue affects Junos OS:<br />
<br />
* All versions before 21.2R3-S9, <br />
* All versions of 21.4, <br />
* All versions of 22.2, <br />
* from 22.4 before 22.4R3-S7, <br />
* from 23.2 before 23.2R2-S3, <br />
* from 23.4 before 23.4R2-S4, <br />
* from 24.2 before 24.2R2.
Impacto
Puntuación base 4.0
7.10
Gravedad 4.0
ALTA
Puntuación base 3.x
6.50
Gravedad 3.x
MEDIA