CVE-2026-57029

Estado: AnalizadaMedia (6)—

A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS).

When the reachability of an sFlow collector changes, the corresponding next-hop entry is updated. If this update occurs simultaneously with the sFlow thread accessing the next-hop data (which is outside the attackers control), it causes the evo-pfemand process to crash, impacting all traffic forwarding until the automatic process restart has completed.

This issue affects Junos OS Evolved on QFX Series:

Detalles técnicos trazas, registros y código del informe original

  *  all 23.2 versions, 
  *  23.4 versions before 23.4R2-S7-EVO,
  *  24.2 versions before 24.2R2-S5-EVO,
  *  24.4 versions before 24.4R2-S3-EVO,
  *  25.2 versions before 25.2R2-EVO.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X
Puntuación base: 6

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.19%
Percentil entre todas las CVEs puntuadas: 8
Fecha de la puntuación: 5/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos OS Evolved

CWE

CWE-820

Referencias

https://supportportal.juniper.net/JSA110089

JSON original (NVD)

Mostrar

{
  "id": "CVE-2026-57029",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-57029",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-07-10T14:44:51.065414Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.6
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 6,
          "Automatable": "YES",
          "attackVector": "ADJACENT",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "privilegesRequired": "NONE",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "LOW",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "MODERATE",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS Evolved",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "23.4R2-S7-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.2",
              "lessThan": "24.2R2-S5-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.4",
              "lessThan": "24.4R2-S3-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.2",
              "lessThan": "25.2R2-EVO",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QFX Series"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-07-09T22:17:08.453",
  "references": [
    {
      "url": "https://supportportal.juniper.net/JSA110089",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-820"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS).\n\n\nWhen the reachability of an sFlow collector changes, the corresponding next-hop entry is updated. If this update occurs simultaneously with the sFlow thread accessing the next-hop data (which is outside the attackers control), it causes the evo-pfemand process to crash, impacting all traffic forwarding until the automatic process restart has completed.\n\n\n\n\nThis issue affects Junos OS Evolved on QFX Series:\n\n\n  *  all 23.2 versions, \n  *  23.4 versions before 23.4R2-S7-EVO,\n  *  24.2 versions before 24.2R2-S5-EVO,\n  *  24.4 versions before 24.4R2-S3-EVO,\n  *  25.2 versions before 25.2R2-EVO."
    }
  ],
  "lastModified": "2026-07-13T20:23:46.113",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1EC14A0-074B-445D-BDF8-7B54E38712F7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D7F0D73-85EE-4A07-B51B-6BF52ECBA75E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE777A1F-9CD9-426E-AF1C-FBE01EB9A4A8"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7147BA60-30A5-4CED-9AAF-F6BEA0528B89"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E5CE59B-14B2-4F4C-81B5-0430EC954956"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB82B22F-9005-4EF0-A1E3-4261757783D4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0224D3F1-8B86-432C-8F5B-B4B7B69ADF31"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB2FE5FE-0ADE-406E-A23D-FDCC104B2496"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E58987A-D7B7-4FFF-9969-E8FD76AE2BE3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E779C0D4-A8F7-4976-B3C8-B9802B96E715"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7457415-D893-474B-ABA6-9841BB5CC6DB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EFB8038-F336-4038-9AEA-C24253FAD578"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DD89AAD-C615-42AF-B8AF-E6067862F0F5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28AFF11D-E418-4A76-B557-F60622602537"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A86A69D-2B90-4B3B-A6EC-88358284787D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "080BEA58-9667-4C2C-810D-DC1187DB67DA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34072A94-CFEB-4FAA-8E68-E98D4F7602E4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C79FF7EC-AD91-4F9F-B8AC-B1A9C9271816"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C61DC50-CAB6-4197-90C8-A2B48EE8F761"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "178FFC73-28CC-471E-A1E8-1AF8BC731DD6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B32ADA05-5F5D-45B6-BB7B-3FA6A6F229F5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6526E82-A6A6-4A65-9B01-B3FCB947F44E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF3B74FA-DF84-4E3E-BCF9-44EEF9E45910"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DC024CDE-DA63-4E87-BA97-5E8C06B0D8B7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25DA0DD2-E974-448C-BD05-ED6FCA4725FB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5F6F47F-0C86-4554-8517-A6A0CD29B3B0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EDB7A3C-D1F5-4D24-8B8C-F104EC8C7D42"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAF96553-DB70-4DFA-8658-306A7477DD06"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83C415EF-E87B-4259-A836-59B3A9C3914B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFD32E67-9D8D-437D-96BC-CA97A1F686BA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E5D9967-1B53-427B-9B23-77DC399F3D71"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1453E42A-77B3-4922-8EC3-1A5668C39550"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "26408465-BD6A-4416-B98E-691A5F651080"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "79A8847B-4F98-4949-8639-5CD2B411D10F"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5140:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C3F14350-BB10-411D-B144-FC762CA2608C"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EDC5478F-A047-4F6D-BB11-0077A74C0174"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D877320D-1997-4B66-B11B-864020C755E1"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D193BEBD-9436-468D-B89E-D5720603451D"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5230-64cd:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9F3D09BE-C16F-4E77-B6FB-C0C58BBD7675"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5240:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9ABF8F9D-45C1-4554-A213-435A68709FCB"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5241:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "685120A6-7005-4ECB-A37F-0F225BB92676"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5250:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "574756C3-F97D-4193-A074-3091F978A1DC"
            },
            {
              "criteria": "cpe:2.3:h:juniper:qfx5700:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C7D6C74F-E85F-4D62-BDAF-FE619B467C76"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}