CVE-2025-52958: Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).On all Junos OS and Junos OS Evolved devices, when route validation is enabled, a rare condition during BGP initial session establishment can lead to an rpd crash and restart. This occurs specifically when the connection request fails during error-handling scenario.
Continued session establishment failures leads to a sustained DoS condition.
This issue affects Junos OS:
All versions before 22.2R3-S6, from 22.4 before 22.4R3-S6, from 23.2 before 23.2R2-S3, from 23.4 before 23.4R2-S4, from 24.2 before 24.2R2;
Junos OS Evolved: All versions before 22.2R3-S6-EVO, from 22.4 before 22.4R3-S6-EVO, from 23.2 before 23.2R2-S3-EVO, from 23.4 before 23.4R2-S4-EVO, from 24.2 before 24.2R2-EVO.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52958?
CVE-2025-52958 is classified as a High severity vulnerability due to its potential to cause a Denial of Service (DoS) with adjacent, unauthenticated access.
How do I fix CVE-2025-52958?
To fix CVE-2025-52958, upgrade to Junos OS versions 22.2R3-S7 or later and Junos OS Evolved versions 22.2R3-S7-EVO or later.
Who is affected by CVE-2025-52958?
CVE-2025-52958 affects all devices running vulnerable versions of Juniper Networks Junos OS and Junos OS Evolved.
What type of attack does CVE-2025-52958 facilitate?
CVE-2025-52958 facilitates a Denial of Service (DoS) attack through a reachable assertion vulnerability in the routing protocol daemon.
When was CVE-2025-52958 published?
CVE-2025-52958 was published on October 9, 2025.