BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

CVE-2025-59962

6.0 medium SSVC exploitation: none Analyzed
NVD · CVE.org

An Access of Uninitialized Pointer vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attacker triggering indirect next-hop updates, along with timing outside the attacker's control, to cause rpd to crash and restart, leading to a Denial of Service (DoS). With BGP sharding enabled, triggering route resolution of an indirect next-hop (e.g., an IGP route change over which a BGP route gets resolved), may cause rpd to crash and restart. An attacker causing continuous IGP route churn, resulting in repeated route re-resolution, will increase the likelihood of triggering this issue, leading to a potentially extended DoS condition. This issue affects: Junos OS: * all versions before 21.4R3-S6, * from 22.1 before 22.1R3-S6, * from 22.2 before 22.2R3-S3, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3, * from 23.2 before 23.2R2; Junos OS Evolved: * all versions before 22.3R3-S3-EVO, * from 22.4 before 22.4R3-EVO, * from 23.2 before 23.2R2-EVO. Versions before Junos OS 21.3R1 and Junos OS Evolved 21.3R1-EVO are unaffected by this issue.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 6.0 · juniperNVD modified 2026-10-18 21:10

Affected (CPE criteria) 80

  • cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s4:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.1:r3-s5:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*
  • and 40 more

References 1