CVE-2025-21597

CVE-2025-21597 covers an issue in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. When BGP rib-sharding and update-threading are configured, a remote, unauthenticated, logically adjacent BGP peer can cause rpd to crash and restart via a specific timing of peer...

CVE-2025-30653

CVE-2025-30653 describes an Expired Pointer Dereference in Juniper Networks Junos OS and Junos OS Evolved RPD (Routing Protocol Daemon). When an MPLS LSP is configured with node-link-protection and transport-class and an LSP flaps, rpd can crash and restart, causing a Denial of Service. Affected ...

CVE-2022-22211

Summary: CVE-2022-22211 affects Juniper Networks Junos OS Evolved on PTX Series. A DoS occurs when an unprivileged attacker continuously polls the SNMP jnxCosQstatTable, exhausting FPC GUID space and rendering FPC resources unreachable. The issue manifests via specific syslog messages (evo-aftman...

CVE-2024-30390

CVE-2024-30390 affects Juniper Networks Junos OS Evolved. The vulnerability is an improper restriction of excessive authentication attempts: after a connection is blocked for exceeding connections-per-second, the system does not consider existing connections for subsequent attempts, allowing the ...

CVE-2024-39552

CVE-2024-39552 affects Juniper Networks Junos OS and Junos OS Evolved: the RPD (routing protocol daemon) crashes when a malformed BGP UPDATE is received over an established BGP session, causing DoS. A network-based, unauthenticated attacker can trigger the crash via IPv4/IPv6 eBGP/iBGP traffic; i...

CVE-2022-22169

CVE-2022-22169 affects Juniper Networks Junos OS and Junos OS Evolved. An improper initialization in the routing protocol daemon (rpd) can cause OSPFv3 to enter graceful-restart GR helper mode when a attacker sends crafted packets in specific order/timing, potentially causing a DoS via a stalled ...

CVE-2022-22220

The CVE-2022-22220 issue is a TOCTOU race condition in Juniper Junos OS/rpd that can crash the process when a BGP flow route with a redirect IP is received while the next-hop reachability is flapping, enabling a network-based DoS. Affected software includes Junos OS and Junos OS Evolved across li...

CVE-2023-28983

CVE-2023-28983 describes an OS command injection in the gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved. The vulnerability is triggered by an authenticated, low-privilege, network-based attacker who can inject shell commands and execute code due to the ...

CVE-2021-0287

CVE-2021-0287 affects Juniper Networks Junos OS and Junos OS Evolved in SR-ISIS/MPLS with ISIS Flexible Algorithm and sensor-based statistics. A flap of an ISIS link can crash and restart the RPD, causing Denial of Service (DoS). Affected versions include Junos OS: 19.4 prior to 19.4R1-S4 and 19....

CVE-2022-22177

CVE-2022-22177 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an illegal memory vulnerability in the snmpd daemon that can be triggered by crafted SNMP input, causing the snmpd process to segfault or halt and resulting in a sustained Denial of Service until manual restart. A...

CVE-2022-22192

CVE-2022-22192 describes an improper validation of input in the kernel of Juniper Networks Junos OS Evolved on PTX series. A network-based, unauthenticated attacker can cause a kernel panic by sending a malformed TCP packet destined to PTX10004/10008/10016, specifically targeting the BGP, LDP, or...

CVE-2023-22400

CVE-2023-22400 affects Juniper Networks Junos OS Evolved (evo-pfemand) and can cause an FPC crash/DoS due to a GUID leak triggered by specific SNMP GETs or CLI commands. Affected families include all versions before 20.4R3-S3-EVO; 21.1-EVO (21.1R1-EVO and later); all versions before 21.2R3-S4-EVO...

CVE-2025-30648

Summary: CVE-2025-30648 affects Juniper Networks Junos OS and Junos OS Evolved. An Improper Input Validation in the Juniper DHCP Daemon (jdhcpd) allows an unauthenticated, adjacent attacker to crash the jdhcpd when it receives a specifically malformed DHCP packet, causing a Denial of Service (DoS...

CVE-2024-21613

CVE-2024-21613 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is a Missing Release of Memory after Effective Lifetime in the Routing Protocol Daemon (RPD) that, when traffic engineering is enabled for OSPF or ISIS and a link flap occurs, causes a patroot memory leak leading to ...

CVE-2024-39557

CVE-2024-39557 describes an Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS Evolved, caused by a memory leak in the Layer 2 Address Learning Daemon (l2ald) triggered by certain MAC table updates. This memory leak can exhaust system memory, causing a crash and DoS. Aff...

CVE-2021-0209

CVE-2021-0209 affects Juniper Networks Junos OS Evolved (RPD daemon) where processing certain valid BGP update packets can lead to an uninitialized pointer dereference, causing RPD to core and a Denial of Service. The DoS can persist with continued receipt of such packets and requires an RPD rest...

CVE-2022-22214

CVE-2022-22214 describes an improper input validation in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can trigger a specific transit IPv6 packet over MPLS that causes an FPC to crash and reboot, with continued receipt leading to a sust...

CVE-2024-39516

CVE-2024-39516 is an Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated network attacker can send a specially malformed BGP packet to cause rpd to crash and restart, producing a DoS. The issue affects iBGP/eB...

CVE-2023-28982

CVE-2023-28982 affects Juniper Networks Junos OS and Junos OS Evolved. In a BGP rib sharding scenario, updating an active route’s attribute can cause a memory leak in the routing protocol daemon (rpd), leading to increased memory usage, a subsequent out-of-memory condition, and a DoS through rpd ...

CVE-2023-44182

CVE-2023-44182 affects Juniper Networks Junos OS and Junos OS Evolved, via an unchecked return value in multiple user interfaces (CLI, XML API, XML Management Protocol, NETCONF, gNMI, and J-Web) that can cause privilege demotion/elevation based on operator actions. Affected are Junos OS versions ...

CVE-2024-30394

CVE-2024-30394 affects Junos OS and Junos OS Evolved. It is a Stack-based Buffer Overflow in the Routing Protocol Daemon (RPD) triggered when EVPN is configured and a specific EVPN type-5 route is learned via BGP, causing an unauthenticated network-based attacker to crash rpd and induce DoS. Affe...

CVE-2024-39556

Summary of CVE-2024-39556 : A stack-based buffer overflow vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker with CLI access to load a crafted certificate via the set security certificates command, potentially crashing the command management da...

CVE-2021-0298

A race condition in the show chassis pic command can crash the port interface concentrator daemon (picd) on the FPC, causing DoS when the CLI is executed under certain system events. Affected: Juniper Networks Junos OS Evolved prior to 20.1R2-EVO on PTX10003/PTX10008. Junos OS (non-Evolved) is no...

CVE-2023-36833

CVE-2023-36833 describes a Use After Free in the AFTMAN-BT process of Juniper Networks Junos OS Evolved (PTX10001-36MR, PTX10004, PTX10008, PTX10016 with LC1201/1202) triggered by multiple flaps on a multicast-only fast reroute (MoFRR) interface. The flaw causes the aftman-bt process to crash, wh...

CVE-2021-0250

CVE-2021-0250 is a vulnerability in Juniper Networks Junos OS (and Junos OS Evolved) where, in SRTE/BGP monitoring contexts, processing a crafted BGP update message can cause the Routing Protocol Daemon (RPD) to core, leading to a DoS. Affected: Junos OS versions 17.4R1 and later before 17.4R2-S6...

CVE-2023-22398

CVE-2023-22398 affects Juniper Networks Junos OS and Junos OS Evolved: an Access of Uninitialized Pointer in the Routing Protocol Daemon (rpd). When an MPLS ping is performed on BGP LSPs, RPD may crash, leading to a DoS with repeated executions. Affected versions include: Junos OS 15.1 (prior to ...

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

CVE-2021-31353

Summary : CVE-2021-31353 is a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where processing a crafted BGP update can crash the Routing Protocol Daemon (RPD), causing a DoS. The issue is tied to an improper handling of exceptional conditions and affects specific Ju nis OS/Junos ...

CVE-2022-22225

TOCTOU race condition in Juniper Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd) allows an unauthenticated attacker on an established BGP session to trigger a DoS by crashing rpd when a route in a BGP multipath flap scenario is a contributing route. Affected versions include Junos O...

CVE-2023-44195

CVE-2023-44195 affects Juniper Networks Junos OS Evolved, specifically the NetworkStack nsagentd component. The issue arises from an improper restriction of a communication channel to endpoints, allowing an unauthenticated network attacker to reach the Routing-Engine (RE) with packets that bypass...

CVE-2023-44204

CVE-2023-44204 affects Juniper Networks Junos OS and Junos OS Evolved, via an Improper Validation of Syntactic Correctness of Input in the Routing Protocol Daemon (rpd). A malformed BGP UPDATE packet received on an established BGP session can crash rpd, causing a DoS on both eBGP and iBGP session...

CVE-2024-39521

The issue CVE-2024-39521 affects Juniper Networks Junos OS Evolved: the CLI mishandles command options under crafted parameter sets, enabling a local, authenticated user with low privileges to escalate to root on the shell and fully compromise the system. Affected versions include 21.1-EVOR1-EVO ...

CVE-2024-39543

CVE-2024-39543 affects Juniper Networks Junos OS and Junos OS Evolved. The root cause is a buffer copy without input size validation in the routing protocol daemon (rpd), which allows an unauthenticated adjacent attacker to send crafted RPKI-RTR packets, crashing rpd and causing a DoS. Affected r...

CVE-2025-21593

Summary (supported by provided documents): CVE-2025-21593 is an improper resource lifecycle control vulnerability in Juniper Junos OS and Junos OS Evolved dengan rpd, exploitable by an unauthenticated network attacker on devices with SRv6 enabled. The attacker can send malformed BGP UPDATE packet...

CVE-2022-22224

The CVE-2022-22224 issue affects Juniper Networks Junos OS and Junos OS Evolved, where processing a malformed OSPF TLV can cause the periodic packet management daemon (PPMD) to enter an infinite loop. This unblocks an unauthenticated adjacent attacker to induce a DoS by affecting OSPF neighbor re...

CVE-2023-22401

CVE-2023-22401 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the aftmand (Advanced Forwarding Toolkit Manager) daemon on PTX10008/PTX10016. An improper validation of an array index allows an unauthenticated, network-based attacker to trigger a DoS by querying a particular S...

CVE-2023-44197

CVE-2023-44197 describes an Out-of-Bounds Write in Juniper’s Routing Protocol Daemon (rpd) that allows an unauthenticated, network-based attacker to cause a DoS by crashing the rpd while processing BGP route updates. Affected products are Junos OS and Junos OS Evolved. Supported versions include:...

CVE-2024-21596

CVE-2024-21596 describes a heap-based buffer overflow in the Routing Protocol Daemon (RPD) of Junos OS and Junos OS Evolved. An unauthenticated, network-based attacker capable of establishing a BGP session can craft specific BGP UPDATE messages to trigger a memory overwrite, causing an RPD crash ...

CVE-2024-39517

The CVE-2024-39517 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically the Layer 2 Address Learning Daemon (l2ald). In EVPN/VXLAN deployments, processing a high volume of certain Layer 2 packets can cause the Routing Protocol Daemon (rpd) to consume all CPU resources, leadi...

CVE-2024-39528

CVE-2024-39528 — AUse After Free in Juniper Junos OS/Junos OS Evolved Routing Protocol Daemon (rpd) causes a segmentation fault on a specific sequence (routing-instance deactivation + SNMP request), leading to rpd crash and DoS. Affected: Junos OS and Junos OS Evolved. Reported vulnerable version...

CVE-2025-21599

CVE-2025-21599 affects Juniper Networks Junos OS Evolved. The vulnerability is in the Juniper Tunnel Driver (jtd) where a memory misreference occurs after handling certain malformed IPv6 packets, causing kernel memory not to be freed and leading to memory exhaustion and a Denial of Service. Affec...

CVE-2025-30654

CVE-2025-30654 affects Junos OS and Junos OS Evolved. A local, low-privileged attacker with CLI access can exploit the UI via a specific show mgd command to view sensitive information, including password hashes. Affected versions include Junos OS pre-21.4R3-S10, 22.2 before 22.2R3-S5, 22.4 before...

CVE-2021-0292

CVE-2021-0292 corresponds to a memory-leak DoS in Juniper Networks Junos OS Evolved’s arpd and ndp processes. Affected are Junos OS Evolved versions 19.4 prior to 19.4R2-S3-EVO; 20.1 prior to 20.1R2-S4-EVO; and all 20.2-EVO. The vulnerability allows a local attacker on the same network to drive u...

CVE-2022-22184

CVE-2022-22184 : Juniper Junos OS and Junos OS Evolved (22.3R1 / 22.3R1-EVO) contain an improper input validation vulnerability in the Routing Protocol Daemon (rpd). An unauthenticated, network-based attacker can trigger a Denial of Service by sending a BGP update on an established session that c...

CVE-2022-22212

CVE-2022-22212 – Juniper Junos OS Evolved (PFE DoS) . The issue is an Allocation of Resources Without Limits or Throttling in the Packet Forwarding Engine (PFE) that allows an unauthenticated network attacker to cause a sustained Denial of Service by driving hostbound traffic on Junos OS Evolved ...

CVE-2024-39514

CVE-2024-39514 affects Junos OS and Junos OS Evolved. An attacker—adjacent, unauthenticated—can trigger a crash of the Routing Protocol Daemon (rpd) by sending specific traffic on devices with EVPN-VPWS and IGMP-snooping enabled, causing a DoS. Affected ranges are listed per release: Junos OS ver...

CVE-2022-22213

CVE-2022-22213 affects Juniper Networks Junos OS and Junos OS Evolved. A vulnerability in the Routing Protocol Daemon (RPD) handling of undefined values can allow an unauthenticated, network-based attacker to crash the RPD by sending a crafted BGP update while the host is under heavy load, leadin...

CVE-2022-22250

CVE-2022-22250 affects Juniper Networks Junos OS and Junos OS Evolved PFE. An improper control of a resource through its lifetime allows an unauthenticated adjacent attacker to cause a DoS via memory corruption when EVPN-MPLS MAC learned locally is deleted as remotely learned, potentially causing...

CVE-2023-22406

CVE-2023-22406 affects Juniper Networks Junos OS and Junos OS Evolved. It is a memory-leak/DoS issue in the kernel that manifests when a peer interface flaps in a Segment Routing scenario using OSPF, causing continuous memory growth in rpd and eventual rpd crash. Affected versions include Junos O...

CVE-2024-21611

CVE-2024-21611 affects Juniper Networks Junos OS and Junos OS Evolved. In a jflow scenario with continuous route churn, the Routing Protocol Daemon (rpd) may suffer a memory leak due to a missing release of memory after its lifetime, potentially causing an unauthenticated, network-based DoS via r...