جزئیات آسیبپذیری
CVE-2025-30651
Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash
شرح رسمی (انگلیسی)
A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When an attacker sends a specific ICMPv6 packet to an interface with "protocols router-advertisement" configured, rpd crashes and restarts. Continued receipt of this packet will cause a sustained DoS condition. This issue only affects systems configured with IPv6. This issue affects Junos OS: * All versions before 21.2R3-S9, * from 21.4 before 21.4R3-S10, * from 22.2 before 22.2R3-S6, * from 22.4 before 22.4R3-S4, * from 23.2 before 23.2R2-S2, * from 23.4 before 23.4R2; and Junos OS Evolved: * All versions before 21.2R3-S9-EVO, * from 21.4-EVO before 21.4R3-S10-EVO, * from 22.2-EVO before 22.2R3-S6-EVO, * from 22.4-EVO before 22.4R3-S4-EVO, * from 23.2-EVO before 23.2R2-S2-EVO, * from 23.4-EVO before 23.4R2-EVO.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 4.0 | CVEProject cvelistV5 (CNA) (juniper) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (juniper) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Juniper Networks | Junos OS | v < 21.2R3-S9 | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS | 21.4 ≤ v < 21.4R3-S10 | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS | 22.2 ≤ v < 22.2R3-S6 | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS | 22.4 ≤ v < 22.4R3-S4 | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS | 23.2 ≤ v < 23.2R2-S2 | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS | 23.4 ≤ v < 23.4R2 | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS Evolved | v < 21.2R3-S9-EVO | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS Evolved | 21.4-EVO ≤ v < 21.4R3-S10-EVO | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS Evolved | 22.2-EVO ≤ v < 22.2R3-S6-EVO | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS Evolved | 22.4-EVO ≤ v < 22.4R3-S4-EVO | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS Evolved | 23.2-EVO ≤ v < 23.2R2-S2-EVO | CVEProject cvelistV5 (CNA) |
| Juniper Networks | Junos OS Evolved | 23.4-EVO ≤ v < 23.4R2-EVO | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱- https://supportportal.juniper.net/JSA96461 vendor-advisory
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۱/۲۰
- آخرین بهروزرسانی
- ۱۴۰۴/۰۱/۲۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- juniper
پیشبینی بهرهبرداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- جزئی
ضعفها (CWE)
- CWE-805Buffer Access with Incorrect Length Value