VDB
CVE-2025-21598
CVE-2025-21598
PUBLISHED
Es bestehen mehrere Schwachstellen in Juniper JUNOS. Diese Schwachstellen bestehen, weil der Juniper-Tunneltreiber (jtd) den Kernel-Speicher nicht ordnungsgemäß freigibt, nachdem er nicht mehr benötigt wird, und weil der Routing-Protokoll-Dämon (rpd) nicht ordnungsgemäß mit fehlerhaften BGP-Paketen umgeht, wenn die Paketempfangs-Trace-Optionen aktiviert sind, was zu einem Systemabsturz führt. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen 'Denial of Service'-Zustand zu erzeugen.
EPSS 0.74% · 73.3th percentile
Risk Scores
EPSS Score
0.74%
73.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Juniper | Juniper JUNOS | |
| Juniper | Juniper JUNOS Evolved |
Timeline
- Jan 8, 2025 CVE Published
- Jan 10, 2025 EPSS Score
- Jan 26, 2025 EPSS Score
- Feb 10, 2025 EPSS Score
- Feb 26, 2025 EPSS Score
- Mar 14, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
- Apr 14, 2025 EPSS Score
- Apr 26, 2025 Coalition ESS Score
- Apr 30, 2025 EPSS Score
- May 15, 2025 EPSS Score
- May 31, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0031.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0031 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-On-SRv6-enabled-devices-an-attacker-sending-a-malformed-BGP-update-can-cause-the-rpd-to-crash-CVE-2025-21593 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-specially-crafted-BGP-update-packet-causes-RPD-crash-CVE-2025-21602 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-When-BGP-traceoptions-are-configured-receipt-of-malformed-BGP-packets-causes-RPD-to-crash-CVE-2025-21598 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-With-certain-BGP-options-enabled-receipt-of-specifically-malformed-BGP-update-causes-RPD-crash-CVE-2025-21600 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-Evolved-Receipt-of-specifically-malformed-IPv6-packets-causes-kernel-memory-exhaustion-leading-to-Denial-of-Service-CVE-2025-21599 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-SRX1500-SRX4100-SRX4200-Execution-of-low-privileged-CLI-command-results-in-chassisd-crash-CVE-2025-21596 advisory
- https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-SRX-Series-Low-privileged-user-able-to-access-highly-sensitive-information-on-file-system-CVE-2025-21592 advisory