CVE-2025-30659— Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-30659
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
Source: NVD (National Vulnerability Database)
Vulnerability Description
An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When a device configured for Secure Vector Routing (SVR) receives a specifically malformed packet the PFE will crash and restart. This issue affects Junos OS on SRX Series: * All 21.4 versions, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R2. This issue does not affect versions before 21.4.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
长度参数不一致性处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Juniper Networks Junos OS SRX 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS SRX是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS SRX存在安全漏洞，该漏洞源于长度参数处理不一致，可能导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 21.4R1 ~ 21.4* | - |
II. Public POCs for CVE-2025-30659
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-30659
请登录查看更多情报信息。
Same Patch Batch · Juniper Networks · 2025-04-09 · 21 CVEs total
| CVE-2025-30658 | 7.5 HIGH | Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will |
| CVE-2025-30660 | 7.5 HIGH | Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset |
| CVE-2025-30656 | 7.5 HIGH | Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG |
| CVE-2025-21594 | 7.5 HIGH | Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes po |
| CVE-2025-21601 | 7.5 HIGH | Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is e |
| CVE-2025-30644 | 7.5 HIGH | Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet c |
| CVE-2025-30645 | 7.5 HIGH | Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunne |
| CVE-2025-30651 | 7.5 HIGH | Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun |
| CVE-2025-30649 | 7.5 HIGH | Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a |
| CVE-2025-21591 | 7.4 HIGH | Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhc |
| CVE-2025-30648 | 7.4 HIGH | Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhc |
| CVE-2025-30647 | 6.5 MEDIUM | Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak |
| CVE-2025-30646 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash |
| CVE-2025-30653 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash |
| CVE-2025-21595 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause |
| CVE-2025-30652 | 5.5 MEDIUM | Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is |
| CVE-2025-30654 | 5.5 MEDIUM | Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive informati |
| CVE-2025-30655 | 5.5 MEDIUM | Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sha |
| CVE-2025-21597 | 5.3 MEDIUM | Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured a |
| CVE-2025-30657 | 5.3 MEDIUM | Junos OS: Processing of a specific BGP update causes the SRRD process to crash |
IV. Related Vulnerabilities
Same product: Junos OS
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33781
Junos OS: EX Series, QFX Series: In a VXLAN scenario when sp
Same vendor: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
Same weakness: CWE-130
- CVE-2026-5766
Potential denial-of-service vulnerability in ASGI requests v - CVE-2026-33846
Gnutls: gnutls: denial of service via heap buffer overflow i - CVE-2026-3868
Moxa EDR-8010 Series和Moxa EDR-G9010 Series 安全漏洞 - CVE-2026-5265
Ovn: ovn: heap over-read in icmp error response generation - - CVE-2026-5367
Ovn: ovn: information disclosure via crafted dhcpv6 packets
V. Comments for CVE-2025-30659
No comments yet