CVE-2025-60004 - Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash

Back Back to CVE browser

HIGH

Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash

Published Oct 9, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.42%

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-Of-Service (DoS).

When an affected system receives a specific BGP EVPN update message over an established BGP session, this causes an rpd crash and restart.

A BGP EVPN configuration is not necessary to be vulnerable. If peers are not configured to send BGP EVPN updates to a vulnerable device, then this issue can't occur.

This issue affects iBGP and eBGP, over IPv4 and IPv6.

This issue affects: Junos OS: * 23.4 versions from

23.4R2-S3 before 23.4R2-S5, * 24.2 versions from

24.2R2

before 24.2R2-S1, * 24.4 versions before 24.4R1-S3, 24.4R2;

Junos OS Evolved: * 23.4-EVO versions from 23.4R2-S2-EVO before 23.4R2-S5-EVO, * 24.2-EVO versions from 24.2R2-EVO before 24.2R2-S1-EVO, * 24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO.

Affected products

Vendor Juniper Networks Product Junos OS Default
unaffected
- Version
  23.4R2-S3
  Status
  affected
  Constraints
  <23.4R2-S5
- Version
  24.2R2
  Status
  affected
  Constraints
  <24.2R2-S1
- Version
  24.4R1
  Status
  affected
  Constraints
  <24.4R1-S3, 24.4R2
Vendor Juniper Networks Product Junos OS Evolved Default
unaffected
- Version
  23.4R2-S2-EVO
  Status
  affected
  Constraints
  <23.4R2-S5-EVO
- Version
  24.2R2-EVO
  Status
  affected
  Constraints
  <24.2R2-S1-EVO
- Version
  24.4R1-EVO
  Status
  affected
  Constraints
  <24.4R1-S3-EVO, 24.4R2-EVO

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

unaffected

Version	Status	Constraints
23.4R2-S3	affected	<23.4R2-S5
24.2R2	affected	<24.2R2-S1
24.4R1	affected	<24.4R1-S3, 24.4R2

Juniper Networks

Junos OS Evolved

unaffected

Version	Status	Constraints
23.4R2-S2-EVO	affected	<23.4R2-S5-EVO
24.2R2-EVO	affected	<24.2R2-S1-EVO
24.4R1-EVO	affected	<24.4R1-S3-EVO, 24.4R2-EVO

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: Junos OS Evolved: 23.4R2-S5-EVO, 24.2R2-S1-EVO, 24.4R1-S3-EVO, 24.4R2-EVO, 25.2R1-EVO, and all subsequent releases; Junos OS: 23.4R2-S5, 24.2R2-S1, 24.4R1-S3, 24.4R2, 25.2R1, and all subsequent releases.

Weaknesses (1)

CWE-754