CVE-2025-52960

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol (SIP) ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When memory utilization is high, and specific SIP packets are received, flowd/mspmand crashes. While the system recovers automatically, the disruption can significantly impact service stability. Continuous receipt of these specific SIP packets, while high utilization is present, will cause a sustained DoS condition. The utilization is outside the attackers control, so they would not be able to deterministically exploit this. This issue affects Junos OS on SRX Series and MX Series:  * All versions before 22.4R3-S7, * from 23.2 before 23.2R2-S4, * from 23.4 before 23.4R2-S5, * from 24.2 before 24.2R2.

• CWE-120

• https://kb.juniper.net/JSA103143Vendor Advisory
• https://supportportal.juniper.net/JSA103143Vendor Advisory

Published

Oct 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-52952An Out-of-bounds Write vulnerability in the connectivity fau…7.1
• CVE-2025-52953An Expected Behavior Violation vulnerability in the routing …7.1
• CVE-2025-52954A Missing Authorization vulnerability in the internal virtua…8.5
• CVE-2025-52955An Incorrect Calculation of Buffer Size vulnerability in the…7.1
• CVE-2025-52958A Reachable Assertion vulnerability in the routing protocol …6
• CVE-2025-5296CWE-59: Improper Link Resolution Before File Access ('Link F…7.3
• CVE-2025-52961An Uncontrolled Resource Consumption vulnerability in the Co…7.1
• CVE-2025-52963An Improper Access Control vulnerability in the User Interfa…6.8
• CVE-2025-52964A Reachable Assertion vulnerability in the Routing Protocol …7.1
• CVE-2025-52967gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_p…5.8
• CVE-2025-52968xdg-open in xdg-utils through 1.2.1 can send requests contai…2.7
• CVE-2025-52969Rejected reason: This CVE ID has been rejected or withdrawn …