216.73.217.139

CVE-2025-59969

· Published 09/04/2026 22:16 · Modified 09/04/2026 22:16

Labels: CVE-2025-59969 2026-04-09CVE-2025-59969CWE-120[email protected]

Essential information

Published
09/04/2026 22:16
Modified
09/04/2026 22:16
Author
Creator
CVSS
7.1 HIGH (v3) 7.1 HIGH (v4.0)
CISA KEV
No
CWE
CVSS vector

CVSS metrics

Description

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Networks Junos OS Evolved on PTX Series or QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).An attacker sending crafted multicast packets will cause line cards running evo-aftmand/evo-pfemand to crash and restart or non-line card devices to crash and restart. Continued receipt and processing of these packets will sustain the Denial of Service (DoS) condition. This issue affects Junos OS Evolved PTX Series: * All versions before 22.4R3-S8-EVO, * from 23.2 before 23.2R2-S5-EVO, * from 23.4 before 23.4R2-EVO, * from 24.2 before 24.2R2-EVO, * from 24.4 before 24.4R2-EVO. This issue affects Junos OS Evolved on QFX5000 Series: * 22.2-EVO version before 22.2R3-S7-EVO, * 22.4-EVO version before 22.4R3-S7-EVO, * 23.2-EVO versions before 23.2R2-S4-EVO, * 23.4-EVO versions before 23.4R2-S5-EVO, * 24.2-EVO versions before 24.2R2-S1-EVO, * 24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO. This issue does not affect Junos OS Evolved on QFX5000 Series versions before: 21.2R2-S1-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-EVO, and 22.1R1-EVO.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<22.4R3-S8-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<23.2R2-S5-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<23.4R2-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<24.2R2-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<24.4R2-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<22.2R3-S7-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<22.4R3-S7-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<23.2R2-S4-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<23.4R2-S5-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<24.2R2-S1-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<24.4R1-S3-EVO:*:*:*:*:*:*:*
juniper / juniper junos os evolved cpe:2.3:a:juniper:juniper_junos_os_evolved:<24.4R2-EVO:*:*:*:*:*:*:*

References