PT-2025-41409
CVE-2025-59975
·
Published
2025-10-09
·
Updated
2025-12-23
Description by
CVSS 4.0
8.7
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:X
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos Space versions prior to 22.2R1 Patch V3
Juniper Networks Junos Space versions 23.1 before 23.1R1 Patch V3
Description
An Uncontrolled Resource Consumption issue exists in the HTTP daemon (
httpd) of Juniper Networks Junos Space. An unauthenticated network-based attacker can flood the system with inbound API calls, leading to resource exhaustion and a Denial of Service (DoS). This resource consumption specifically involves exhausting all available file handles, blocking access via SSH and the web user interface (WebUI). A manual reboot of the system is required to restore functionality. The affected component is the HTTP daemon. The API calls are used to trigger the resource consumption.Recommendations
Update to Junos Space 22.2R1 Patch V3 or later.
Update to Junos Space 23.1R1 Patch V3 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾