CVE-2025-59969Disclosure(juniper / junos_os_evolved)

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Networks Junos OS Evolved on PTX Series or QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).An attacker sending crafted multicast packets will cause line cards running evo-aftmand/evo-pfemand to crash and restart or non-line card devices to crash and restart. Continued receipt and processing of these packets will sustain the Denial of Service (DoS) condition. This issue affects Junos OS Evolved PTX Series: * All versions before 22.4R3-S8-EVO, * from 23.2 before 23.2R2-S5-EVO, * from 23.4 before 23.4R2-EVO, * from 24.2 before 24.2R2-EVO, * from 24.4 before 24.4R2-EVO. This issue affects Junos OS Evolved on QFX5000 Series: * 22.2-EVO version before 22.2R3-S7-EVO, * 22.4-EVO version before 22.4R3-S7-EVO, * 23.2-EVO versions before 23.2R2-S4-EVO, * 23.4-EVO versions before 23.4R2-S5-EVO, * 24.2-EVO versions before 24.2R2-S1-EVO, * 24.4-EVO versions before 24.4R1-S3-EVO, 24.4R2-EVO. This issue does not affect Junos OS Evolved on QFX5000 Series versions before: 21.2R2-S1-EVO, 21.2R3-EVO, 21.3R2-EVO, 21.4R1-EVO, and 22.1R1-EVO.

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • junos_os_evolved
  • ptx10001-36mr
  • ptx10002-36qdd
  • ptx10003

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
junos_os_evolvedptx10001-36mrptx10002-36qddptx10003ptx10004ptx10008ptx10016ptx12008qfx5110qfx5120

7 versions affected across 18 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-10: 2Technical Details · 2026-04-10: 204-10
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-59969 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Network… https://www.cve.org/CVERecord?id=CVE-2025-59969 ----- Traducción: CVE-2025-59969: Un… http://infoflow.cloud`

    Post summary

    The tweet announces CVE-2025-59969, a classic buffer overflow in Juniper’s advanced forwarding toolkit, providing a CVE record link and technical details but no PoC, exploit, patch, or active exploitation evidence.

    00000409
    67 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-59969 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Network… https://www.cve.org/CVERecord?id=CVE-2025-59969

    Post summary

    The post identifies CVE‑2025‑59969 as a classic buffer overflow in Juniper’s advanced forwarding toolkit, linking to the official CVE record.

    00000304
    57.0K followersView on X
CPE platform detail74 entries

74 of 74 entries

PartVendorProductVersionTarget SWTarget HW
OSjuniperjunos_os_evolved---
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.2--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved22.4--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.2--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved23.4--
OSjuniperjunos_os_evolved24.2--
OSjuniperjunos_os_evolved24.2--
OSjuniperjunos_os_evolved24.2--
OSjuniperjunos_os_evolved24.2--
OSjuniperjunos_os_evolved24.4--
OSjuniperjunos_os_evolved24.4--
OSjuniperjunos_os_evolved24.4--
OSjuniperjunos_os_evolved24.4--
OSjuniperjunos_os_evolved24.4--
HWjuniperptx10001-36mr---
HWjuniperptx10002-36qdd---
HWjuniperptx10003---
HWjuniperptx10004---
HWjuniperptx10008---
HWjuniperptx10016---
HWjuniperptx12008---
HWjuniperqfx5110---
HWjuniperqfx5120---
HWjuniperqfx5130---
HWjuniperqfx5200---
HWjuniperqfx5210---
HWjuniperqfx5220---
HWjuniperqfx5230-64cd---
HWjuniperqfx5240---
HWjuniperqfx5241---
HWjuniperqfx5700---

Explore more