CVE-2025-30660: Junos OS MX Series GRE Decapsulation DoS via PFE Reset

Key Information Vulnerability Overview CVE Number: CVE-2025-30660 Title: 2025-04 Security Bulletin: Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset Affected Product: Junos OS on MX Series Severity Severity Level: High CVSS Score: - CVSS v3.1: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - CVSS v4.0: 8.7 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/Vi:N/VA:H/SC:N/SIN:SAL:AU:Y/RE:M) Issue Description Issue: An incorrect check in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows unauthenticated network attackers to trigger a denial-of-service (DoS) condition by sending specific GRE traffic. Symptoms: When processing large volumes of specific GRE traffic, the PFE becomes unresponsive, halting traffic forwarding. Affected Versions Affected Junos OS Versions: - All versions prior to 21.2R3-S9 - 21.4 versions prior to 21.4R3-S8 - 22.2 versions prior to 22.2R3-S4 - 22.4 versions prior to 22.4R3-S5 - 23.2 versions prior to 23.2R2-S2 - 23.4 versions prior to 23.4R2 Resolution Fixed Versions: 21.2R3-S9, 21.4R3-S8, 22.2R3-S4, 22.4R3-S5, 23.2R2-S2, 23.4R2, 24.2R1 and all subsequent versions. Workarounds Workarounds: No known workarounds. Additional Information Tracking ID: 1784246 Related Documentation: - KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories - KB16765: In which releases are vulnerabilities fixed? - KB16443: Overview of the Juniper Networks SIRT Quarterly Security Bulletin Publication Process

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-30660: Junos OS MX Series GRE Decapsulation DoS via PFE Reset