CVE-2025-52946

CWE-416 — Use After Free4 documents4 sources
Severity
8.7HIGH
EPSS
0.1%
top 70.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Juniper Networks Junos OSJuniper Networks Junos OS EvolvedJuniper Junos+1 more
Timeline
PublishedJul 11

Description

A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update with a specifically malformed AS PATH to cause rpd to crash, resulting in a Denial of Service (DoS). Continuous receipt of the malformed AS PATH attribute will cause a sustained DoS condition. On all Junos OS and Junos OS Evolved platforms, the rpd process will crash and restart when a specifically malformed AS PATH is rec…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Affected Packages4 packages

▶CVEListV5juniper_networks/junos_os_evolved23.2-EVO — 23.2R2-S3-EVO+3
▶CVEListV5juniper_networks/junos_os21.4 — *+6
▶NVDjuniper/junos< 21.2+7

🔴Vulnerability Details

2
GHSA
GHSA-2f8g-7hcr-fj76: A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attac↗2025-07-11
▶
CVEList
Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash↗2025-07-11
▶

📋Vendor Advisories

1
Juniper
CVE-2025-52946: A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attac↗2025-07-11
▶
CVE-2025-52946 (HIGH CVSS 8.7) | A Use After Free vulnerability in t | cvebase.io