Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash_CVE-2025-59962

{
    "lastseen": "",
    "description": "An Access of Uninitialized Pointer vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attacker triggering indirect next-hop updates, along with timing outside the attacker's control, to cause rpd to crash and restart, leading to a Denial of Service (DoS).\n\nWith BGP sharding enabled, triggering route resolution of an indirect next-hop (e.g., an IGP route change over which a BGP route gets resolved), may cause rpd to crash and restart. An attacker causing continuous IGP route churn, resulting in repeated route re-resolution, will increase the likelihood of triggering this issue, leading to a potentially extended DoS condition.\n\nThis issue affects:\n\nJunos OS:\n\n\n\n  *  all versions before 21.4R3-S6,\u00a0\n  *  from 22.1 before 22.1R3-S6,\u00a0\n  *  from 22.2 before 22.2R3-S3,\u00a0\n  *  from 22.3 before 22.3R3-S3,\u00a0\n  *  from 22.4 before 22.4R3,\u00a0\n  *  from 23.2 before 23.2R2;\u00a0\n\n\n\n\nJunos OS Evolved:\u00a0\n\n\n\n  *  all versions before 22.3R3-S3-EVO,\u00a0\n  *  from 22.4 before 22.4R3-EVO,\u00a0\n  *  from 23.2 before 23.2R2-EVO.\n\n\n\n\nVersions before Junos OS 21.3R1 and Junos OS Evolved 21.3R1-EVO are unaffected by this issue.",
    "published": "2025-10-09T15:45:19.343Z",
    "modified": "2025-10-09T19:05:04.870Z",
    "type": "cve",
    "title": "Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash",
    "source": "juniper",
    "references": "https://supportportal.juniper.net/JSA103151",
    "id": "CVE-2025-59962",
    "bulletinFamily": "",
    "cwe": [
        "CWE-824"
    ],
    "cvelist": null,
    "sourceData": "Juniper Networks Junos OS 21.4\nJuniper Networks Junos OS 22.1\nJuniper Networks Junos OS 22.2\nJuniper Networks Junos OS 22.3\nJuniper Networks Junos OS 22.4\nJuniper Networks Junos OS 23.2\nJuniper Networks Junos OS Evolved 22.3\nJuniper Networks Junos OS Evolved 22.4\nJuniper Networks Junos OS Evolved 23.2",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Junos OS",
    "version": "21.4",
    "vendor": "Juniper Networks",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}