CVE-2025-52964

A Reachable Assertion vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When the device receives a specific BGP UPDATE packet, the rpd crashes and restarts...

CVE-2025-52949

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of...

CVE-2025-52986

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low privileged user to cause an impact to the availability of the device. When RIB sharding is enabled and a user executes one of...

CVE-2025-52953

An Expected Behavior Violation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a valid BGP UPDATE packet to cause a BGP session reset, resulting in a Denial of Service DoS. Continuous receipt an...

CVE-2025-52958

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS.On all Junos OS and Junos OS Evolved devices, when route validation is enabled, a rare condition...

CVE-2025-52958

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS.On all Junos OS and Junos OS Evolved devices, when route validation is enabled, a rare condition...

CVE-2025-52986

Summary: CVE-2025-52986 is a memory leak in Juniper Networks Junos OS and Junos OS Evolved’s routing protocol daemon (rpd) triggered when RIB sharding is enabled and a user runs certain routing-related show commands. The leak can exhaust memory, causing rpd to crash and restart, impacting device ...

CVE-2025-52984 Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause impact to the availability of the device. When static route points to a reject next hop and a gNMI query is...

CVE-2025-52984 Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause impact to the availability of the device. When static route points to a reject next hop and a gNMI query is...

CVE-2025-52980

CVE-2025-52980 is a Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS on SRX300 Series. An unauthenticated, network-based attacker can crash rpd by sending a BGP UPDATE on an established BGP session containing a specific valid optional ...

CVE-2025-52964

CVE-2025-52964 is a Reachable Assertion vulnerability in Juniper Networks Junos OS and Junos OS Evolved rpd. An unauthenticated, network-based attacker can trigger a crash by sending a specific BGP UPDATE packet when BGP multipath pause-computation-during-churn is configured, leading to a sustain...

CVE-2025-52953

CVE-2025-52953 affects Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can send a valid BGP UPDATE, causing a BGP session reset and a sustained DoS. Affected releases include: Junos OS before 21.2R3-S9; 21.4 before 21.4R3-S11; 22.2 before 22.2R3-S7; 22.4 befor...

CVE-2025-52953 Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

An Expected Behavior Violation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a valid BGP UPDATE packet to cause a BGP session reset, resulting in a Denial of Service DoS. Continuous receipt an...

CVE-2025-52953 Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

An Expected Behavior Violation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a valid BGP UPDATE packet to cause a BGP session reset, resulting in a Denial of Service DoS. Continuous receipt an...

CVE-2025-52958

Summary of CVE-2025-52958 : A Reachable Assertion in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved can cause an adjacent, unauthenticated attacker to trigger a DoS. The issue occurs when route validation is enabled and a rare condition during BGP initial sess...

CVE-2025-52958 Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS.On all Junos OS and Junos OS Evolved devices, when route validation is enabled, a rare condition...

CVE-2025-52949

CVE-2025-52949 describes an Improper Handling of Length Parameter Inconsistency in Juniper’s rpd component of Junos OS and Junos OS Evolved. A logically adjacent BGP peer can send a specifically malformed BGP update in EVPN environments, causing rpd to crash and restart, leading to a Denial of Se...

CVE-2025-52949 Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of...

CVE-2025-52946

CVE-2025-52946 is a Use After Free in Juniper Junos OS and Junos OS Evolved rpd triggered by a BGP update containing a specifically malformed AS PATH, causing the rpd process to crash and restart and resulting in DoS when traceoptions are enabled. Affected: Junos OS and Junos OS Evolved across mu...

CVE-2025-52946 Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash

A Use After Free vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update with a specifically malformed AS PATH to cause rpd to crash, resulting in a Denial of Service DoS. Continuous receipt of the...