Juniper Junos OS rpd Buffer Overflow DoS Vulnerability (CVE-2025-30651)

Key Information Vulnerability ID: CVE-2025-30651 Affected Products: All versions of Junos OS and Junos OS Evolved Severity: High CVSS Score: - v3.1: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - v4.0: 8.7 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VIN:VA-H/SC:N/SI:N/SAL) Issue Description: - A buffer access error due to incorrect length value in the routing protocol daemon (rpd) allows an unauthenticated network attacker to cause a denial-of-service (DoS). - When an attacker sends specific ICMPv6 packets to an interface configured with “protocols router-advertisement”, the rpd process crashes and restarts. Continuous reception of such packets can lead to persistent DoS conditions. - This issue affects only systems configured with IPv6. Affected Junos OS Versions: - All versions prior to 21.2R3-S9 - From 21.4 onwards, prior to 21.4R3-S10 - From 22.2 onwards, prior to 22.2R3-S6 - From 22.4 onwards, prior to 22.4R3-S4 - From 23.2 onwards, prior to 23.2R2-S2 - From 23.4 onwards, prior to 23.4R2 Affected Junos OS Evolved Versions: - All versions prior to 21.2R3-S9-EVO - From 21.4-EVO onwards, prior to 21.4R3-S10-EVO - From 22.2-EVO onwards, prior to 22.2R3-S6-EVO - From 22.4-EVO onwards, prior to 22.4R3-S4-EVO - From 23.2-EVO onwards, prior to 23.2R2-S2-EVO - From 23.4-EVO onwards, prior to 23.4R2-EVO Required Configuration for Exposure: Solution: The following software versions have been released to address this issue: - Junos OS: 21.2R3-S9, 21.4R3-S10, 22.2R3-S6, 22.4R3-S4, 23.2R2-S2, 23.4R2, 24.2R1 and later versions - Junos OS Evolved: 21.2R3-S9-EVO, 21.4R3-S10-EVO, 22.2R3-S6-EVO, 22.4R3-S4-EVO, 23.2R2-S2-EVO, 23.4R2-EVO, 24.2R1-EVO and later versions Workaround: No known workaround exists. Firewall filters can be implemented to restrict ICMPv6 traffic. Tracking Number: 1809088

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS rpd Buffer Overflow DoS Vulnerability (CVE-2025-30651)