HIGH🇵🇱 Wersja polska

CVE-2025-59969

CVSS 7.1v4.0pub. 2026-04-09upd. 2026-04-28

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Networks Junos OS Evolved on PTX Series or QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).An attacker sending crafted multicast packets will cause line cards running evo-aftmand/evo-pfemand to crash and restart or non-line card devices to crash and restart. Continued receipt and processing of these packets will sustain the Denial of Service (DoS) condition. This issue affects Junos OS Evolved PTX Series: * All versions before 22.4R3-S8-EVO, * from 23.2 before 23.2R2-S5-EVO, * from 23.4 before 23.4R2-EVO, * from 24.2 before 24.2R2-EVO, * from 24.4 before 24.4R2-EVO. This issue affects Junos OS Evolved on QFX5000 Series: * 22.2-EVO version before 22.2R3-S7-EVO, * 22.4-EVO version before 22.4R3-S7-EVO, * 23.2-EVO versions before 23.2R2-S4-EVO, * 23.4-EVO versions before 23.4R2-S5-EVO, * 24.2-EVO versions before 24.2R2-S1-EVO, * 24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO. This issue does not affect Junos OS Evolved on QFX5000 Series versions before: 21.2R2-S1-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-EVO, and 22.1R1-EVO.

CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber

  • Juniper Junos Os Evolved

    OS
    Juniper
    22.222.423.223.424.224.4< 22.4

  • Juniper Ptx10001 36mr

    HW
    Juniper
    all versions

  • Juniper Ptx10002 36qdd

    HW
    Juniper
    all versions

  • Juniper Ptx10003

    HW
    Juniper
    all versions

  • Juniper Ptx10004

    HW
    Juniper
    all versions

  • Juniper Ptx10008

    HW
    Juniper
    all versions

  • Juniper Ptx10016

    HW
    Juniper
    all versions

  • Juniper Ptx12008

    HW
    Juniper
    all versions

  • Juniper Qfx5110

    HW
    Juniper
    all versions

  • Juniper Qfx5120

    HW
    Juniper
    all versions

  • Juniper Qfx5130

    HW
    Juniper
    all versions

  • Juniper Qfx5200

    HW
    Juniper
    all versions

  • Juniper Qfx5210

    HW
    Juniper
    all versions

  • Juniper Qfx5220

    HW
    Juniper
    all versions

  • Juniper Qfx5230 64cd

    HW
    Juniper
    all versions

  • Juniper Qfx5240

    HW
    Juniper
    all versions

  • Juniper Qfx5241

    HW
    Juniper
    all versions

  • Juniper Qfx5700

    HW
    Juniper
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2026-21902CRITICAL9.3PL ✓same product

RCE jako root w Juniper Junos OS Evolved — błędne uprawnienia do krytycznego zasobu

CVE-2021-0211CRITICAL10.0PL ✓same product

Juniper Junos RPD: DoS przez nieprawidłowy BGP FlowSpec message

CVE-2019-0008CRITICAL9.8PL ✓same product

Stack-based buffer overflow w Junos OS FXPC — RCE przez BGP/BFD

CVE-2019-0006CRITICAL9.8PL ✓same product

RCE przez niezainicjowany wskaźnik funkcji w Juniper Junos OS (fxpc)

CVE-2026-33794HIGH8.2PL ✓same product

DoS w Juniper Junos OS Evolved – awaria procesu evo-aftmand przy unilist ECMP