Memory leak in Junos OS and Junos OS Evolved - CVE-2025-52986
Published: July 18, 2025
Vulnerability identifier: #VU113063
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-52986
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to missing release of memory after effective lifetime error in the routing protocol daemon (rpd). A local user can cause an impact to the availability of the device.
When RIB sharding is enabled and a user executes 1 of several routing related 'show' commands, a certain amount of memory is leaked.
When all available memory has been consumed rpd will crash and restart.
Affected software
Junos OS
Junos OS Evolved
Junos OS Evolved
How to mitigate CVE-2025-52986
Install updates from vendor's website.
Junos OS - addressed in versions 21.2R3-S9, 21.4R3-S11, 22.2R3-S7, 22.4R3-S7, 23.2R2-S4, 23.4R2-S4, 24.2R2, 24.4R1-S2, 24.4R2, 25.2R1
Junos OS Evolved - addressed in versions 22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R2-EVO, 25.2R1-EVO
Junos OS Evolved - addressed in versions 22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R2-EVO, 25.2R1-EVO