CVE-2025-30656

published 2025-04-09

CVE-2025-30656: An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MS-MPC…

high 8.7 CVSS 4.0

AV N AC L AT N PR N UI N VC N VI N VA H SC N SI N SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU Y R A V X RE M U X

An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MS-MPC, MS-MIC and SPC3, and SRX Series, allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

If the SIP ALG processes specifically formatted SIP invites, a memory corruption will occur which will lead to a crash of the FPC processing these packets. Although the system will automatically recover with the restart of the FPC, subsequent SIP invites will cause the crash again and lead to a sustained DoS.

This issue affects Junos OS on MX Series and SRX Series:

* all versions before 21.2R3-S9,
* 21.4 versions before 21.4R3-S10,
* 22.2 versions before 22.2R3-S6,
* 22.4 versions before 22.4R3-S5,
* 23.2 versions before 23.2R2-S3,
* 23.4 versions before 23.4R2-S3,
* 24.2 versions before 24.2R1-S2, 24.2R2.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	< 21.2	21.2
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	mx_series	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	< 21.2R3-S9	21.2R3-S9
juniper_networks	junos_os	>= 21.4 < 21.4R3-S10	21.4R3-S10
juniper_networks	junos_os	>= 22.2 < 22.2R3-S6	22.2R3-S6
juniper_networks	junos_os	>= 22.4 < 22.4R3-S5	22.4R3-S5
juniper_networks	junos_os	>= 23.2 < 23.2R2-S3	23.2R2-S3
juniper_networks	junos_os	>= 23.4 < 23.4R2-S3	23.4R2-S3
juniper_networks	junos_os	>= 24.2 < 24.2R1-S2, 24.2R2	24.2R1-S2, 24.2R2

CWE-167