Untrusted Pointer Dereference in Junos OS and Junos OS Evolved - CVE-2025-59959
Published: January 20, 2026
Vulnerability identifier: #VU121682
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-59959
CWE-ID: CWE-822
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to untrusted pointer dereference error in the routing protocol daemon (rpd). A local user can cause a Denial-of-Service (DoS).
When the command 'show route < ( receive-protocol | advertising-protocol ) bgp > detail' is executed, and at least 1 of the routes in the intended output has specific attributes, this will cause an rpd crash and restart.
Affected software
Junos OS
Junos OS Evolved
Junos OS Evolved
How to mitigate CVE-2025-59959
Install updates from vendor's website.
Junos OS - addressed in versions 22.4R3-S8, 23.2R2-S5, 23.4R2-S5, 24.2R2-S2, 24.4R2, 25.2R1
Junos OS Evolved - addressed in versions 22.4R3-S8-EVO, 23.2R2-S5-EVO, 23.4R2-S6-EVO, 24.2R2-S2-EVO, 24.4R2-EVO, 25.2R1-EVO
Junos OS Evolved - addressed in versions 22.4R3-S8-EVO, 23.2R2-S5-EVO, 23.4R2-S6-EVO, 24.2R2-S2-EVO, 24.4R2-EVO, 25.2R1-EVO