CVE-2025-21599
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes kernel memory to not be freed, resulting in memory exhaustion leading to a system crash and Denial of Service (DoS). Continuous receipt and processing of these packets will continue to exhaust kernel memory, creating a sustained Denial of Service (DoS) condition. This issue only affects systems configured with IPv6. This issue affects Junos OS Evolved: * from 22.4-EVO before 22.4R3-S5-EVO, * from 23.2-EVO before 23.2R2-S2-EVO, * from 23.4-EVO before 23.4R2-S2-EVO, * from 24.2-EVO before 24.2R1-S2-EVO, 24.2R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 22.4R1-EVO.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- EPSS probability
- 0.61%
- CWE
- CWE-401
- Published
- 2025-01-09
- Last modified
- 2026-03-12
Affected products
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS Evolved
Weakness type
Related vulnerabilities
- CVE-2026-69781 — Windows DHCP Client Denial of Service Vulnerability
- CVE-2026-69809 — Windows Active Directory Domain Services Denial of Service Vulnerability
- CVE-2026-69497 — Windows DHCP Server Denial of Service Vulnerability
- CVE-2026-69405 — Windows DHCP Server Denial of Service Vulnerability
- CVE-2026-70065 — Windows DHCP Server Denial of Service Vulnerability
- CVE-2026-69588 — Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-16028 — Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table
- CVE-2026-18313 — rpcapd memory leak in libpcap before 1.10.7