CVE-2025-30659

published 2025-04-09

CVE-2025-30659: An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an…

high 8.7 CVSS 4.0

AV N AC L AT N PR N UI N VC N VI N VA H SC N SI N SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU Y R A V X RE M U X

An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

When a device configured for Secure Vector Routing (SVR) receives a specifically malformed packet the PFE will crash and restart.
This issue affects Junos OS on SRX Series:

* All 21.4 versions,
* 22.2 versions before 22.2R3-S6,
* 22.4 versions before 22.4R3-S6,
* 23.2 versions before 23.2R2-S3,
* 23.4 versions before 23.4R2-S4,
* 24.2 versions before 24.2R2.

This issue does not affect versions before 21.4.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	>= 21.4R1 < 21.4*	21.4*
juniper_networks	junos_os	>= 22.2 < 22.2R3-S6	22.2R3-S6
juniper_networks	junos_os	>= 22.4 < 22.4R3-S6	22.4R3-S6
juniper_networks	junos_os	>= 23.2 < 23.2R2-S3	23.2R2-S3
juniper_networks	junos_os	>= 23.4 < 23.4R2-S4	23.4R2-S4
juniper_networks	junos_os	>= 24.2 < 24.2R2	24.2R2

CWE-130