CVE-2025-59964
A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX4700 devices allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
When forwarding-options sampling is enabled, receipt of any traffic destined to the Routing Engine (RE) by the PFE line card leads to an FPC crash and restart, resulting in a Denial of Service (DoS).
Continued receipt and processing of any traffic leading to the RE by the PFE line card will create a sustained Denial of Service (DoS) condition to the PFE line card.
This issue affects Junos OS on SRX4700:
- from 24.4 before 24.4R1-S3, 24.4R2
This issue affects IPv4 and IPv6.
| Software | From | Fixed in |
|---|---|---|
| juniper / junos | 24.4 | 24.4.x |
| juniper / junos | 24.4-r1 | 24.4-r1.x |
| juniper / junos | 24.4-r1-s2 | 24.4-r1-s2.x |
| juniper / junos | 24.4-r2 | 24.4-r2.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime