CVE-2025-59960
Gravedad CVSS v4.0:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/01/2026
Última modificación:
15/01/2026
Descripción
*** Pendiente de traducción *** An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a DHCP client in one subnet to exhaust the address pools of other subnets, leading to a Denial of Service (DoS) on the downstream DHCP server.<br />
<br />
<br />
<br />
By default, the DHCP relay agent inserts its own Option 82 information when forwarding client requests, optionally replacing any Option 82 information provided by the client. When a specific DHCP DISCOVER is received in &#39;forward-only&#39; mode with Option 82, the device should drop the message unless &#39;trust-option82&#39; is configured. Instead, the DHCP relay forwards these packets to the DHCP server unmodified, which uses up addresses in the DHCP server&#39;s address pool, ultimately leading to address pool exhaustion.<br />
<br />
This issue affects Junos OS: <br />
<br />
<br />
<br />
* all versions before 21.2R3-S10,<br />
* from 21.4 before 21.4R3-S12,<br />
* all versions of 22.2,<br />
* from 22.4 before 22.4R3-S8, <br />
* from 23.2 before 23.2R2-S5, <br />
* from 23.4 before 23.4R2-S6, <br />
* from 24.2 before 24.2R2-S2, <br />
* from 24.4 before 24.4R2, <br />
* from 25.2 before 25.2R1-S1, 25.2R2.<br />
<br />
<br />
<br />
<br />
Junos OS Evolved:<br />
<br />
<br />
<br />
* all versions before 21.4R3-S12-EVO, <br />
* all versions of 22.2-EVO,<br />
* from 22.4 before 22.4R3-S8-EVO, <br />
* from 23.2 before 23.2R2-S5-EVO, <br />
* from 23.4 before 23.4R2-S6-EVO, <br />
* from 24.2 before 24.2R2-S2-EVO, <br />
* from 24.4 before 24.4R2-EVO, <br />
* from 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO.
Impacto
Puntuación base 4.0
6.30
Gravedad 4.0
MEDIA
Puntuación base 3.x
7.40
Gravedad 3.x
ALTA