目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2025-21591— Juniper Networks Junos OS 安全漏洞

CVSS 7.4 · High EPSS 0.13% · P32
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2025-21591の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash
ソース: NVD (National Vulnerability Database)
脆弱性説明
A Buffer Access with Incorrect Length Value vulnerability in the jdhcpd daemon of Juniper Networks Junos OS, when DHCP snooping is enabled, allows an unauthenticated, adjacent, attacker to send a DHCP packet with a malformed DHCP option to cause jdhcp to crash creating a Denial of Service (DoS) condition. Continuous receipt of these DHCP packets using the malformed DHCP Option will create a sustained Denial of Service (DoS) condition. This issue affects Junos OS: * from 23.1 before 23.2R2-S3, * from 23.4 before 23.4R2-S3, * from 24.2 before 24.2R2. This issue isn't applicable to any versions of Junos OS before 23.1R1. This issue doesn't affect vSRX Series which doesn't support DHCP Snooping. This issue doesn't affect Junos OS Evolved. There are no indicators of compromise for this issue.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
使用不正确的长度值访问缓冲区
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Juniper Networks Junos OS 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS 23.1R1至23.2R2-S3之前版本、23.4至23.4R2-S3之前版本和24.2至24.2R2之前版本存在安全漏洞，该漏洞源于jdhcpd守护进程缓冲区访问长度值不正确，可能导致拒绝服务。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
Juniper NetworksJunos OS 23.1 ~ 23.2R2-S3 -

II. CVE-2025-21591の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2025-21591のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Juniper Networks · 2025-04-09 · 21 CVEs total

CVE-2025-306497.5 HIGHJunos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a
CVE-2025-215947.5 HIGHJunos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes po
CVE-2025-216017.5 HIGHJunos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is e
CVE-2025-306447.5 HIGHJunos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet c
CVE-2025-306457.5 HIGHJunos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunne
CVE-2025-306607.5 HIGHJunos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset
CVE-2025-306517.5 HIGHJunos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun
CVE-2025-306567.5 HIGHJunos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG
CVE-2025-306587.5 HIGHJunos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will
CVE-2025-306597.5 HIGHJunos OS: SRX Series: A device configured for vector routing crashes when receiving malfor
CVE-2025-306487.4 HIGHJunos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhc
CVE-2025-306536.5 MEDIUMJunos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash
CVE-2025-306476.5 MEDIUMJunos OS: MX Series: Subscriber login/logout activity will lead to a memory leak
CVE-2025-306466.5 MEDIUMJunos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash
CVE-2025-215956.5 MEDIUMJunos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause
CVE-2025-306525.5 MEDIUMJunos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is
CVE-2025-306545.5 MEDIUMJunos OS and Junos OS Evolved: A local, low privileged user can access sensitive informati
CVE-2025-306555.5 MEDIUMJunos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sha
CVE-2025-306575.3 MEDIUMJunos OS: Processing of a specific BGP update causes the SRRD process to crash
CVE-2025-215975.3 MEDIUMJunos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured a

IV. 関連脆弱性

同じ製品: Junos OS
同じベンダー: Juniper Networks
同じ弱点: CWE-805

V. CVE-2025-21591へのコメント

まだコメントはありません

コメントを残す