CVE-2025-30653: Junos OS RPD Crash DoS via LSP Jitter

Key Information Vulnerability ID: CVE-2025-30653 Affected Products: All versions of Junos OS and Junos OS Evolved Severity: Medium CVSS Score: - v3.1: 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - v3.0: 6.6 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - v4.0: 6.0 (AV:A/AC:L/AT:P/PR:N/UI:N/V:C/N/V:I/N/V:A:H/SC:N/SI:N/SA:N) Issue Description Vulnerability Type: Use-after-free vulnerability Impact Scope: When node link protection and transport-type MPLS Label Switched Paths (LSPs) are configured on Junos OS and Junos OS Evolved platforms, LSP flapping can cause the Routing Protocol Daemon (RPD) to crash and restart. Persistent LSP flapping may lead to sustained Denial of Service (DoS) conditions. Affected Versions Junos OS: - All versions prior to 22.2R3-S4, 22.4 versions prior to 22.4R3-S2, 23.2 versions prior to 23.2R2, 23.4 versions prior to 23.4R2. Junos OS Evolved: - All versions prior to 22.2R3-S4-EVO, 22.4-EVO versions prior to 22.4R3-S2-EVO, 23.2-EVO versions prior to 23.2R2-EVO, 23.4-EVO versions prior to 23.4R2-EVO. Resolution Fixed Versions: - Junos OS: 22.2R3-S4, 22.4R3-S2, 23.2R2, 23.4R2, 24.2R1 and later versions. - Junos OS Evolved: 22.2R3-S4-EVO, 22.4R3-S2-EVO, 23.2R2-EVO, 23.4R2-EVO, 24.2R1-EVO and later versions. Additional Information Tracking Number: 1788445 Release Date: 2025-04-09

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-30653: Junos OS RPD Crash DoS via LSP Jitter