PT-2025-41409
CVE-2025-59975
·
Publicado
2025-10-09
·
Atualizado
2025-12-23
Descrição por
CVSS 4.0
8.7
AltaMétricasAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:X
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos Space versions prior to 22.2R1 Patch V3
Juniper Networks Junos Space versions 23.1 before 23.1R1 Patch V3
Description
An Uncontrolled Resource Consumption issue exists in the HTTP daemon (
httpd) of Juniper Networks Junos Space. An unauthenticated network-based attacker can flood the system with inbound API calls, leading to resource exhaustion and a Denial of Service (DoS). This resource consumption specifically involves exhausting all available file handles, blocking access via SSH and the web user interface (WebUI). A manual reboot of the system is required to restore functionality. The affected component is the HTTP daemon. The API calls are used to trigger the resource consumption.Recommendations
Update to Junos Space 22.2R1 Patch V3 or later.
Update to Junos Space 23.1R1 Patch V3 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾