← Back to CVE Explorer

CVE-2026-57029

Full vulnerability record from the local CVENow database.

Description

A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS). When the reachability of an sFlow collector changes, the corresponding next-hop entry is updated. If this update occurs simultaneously with the sFlow thread accessing the next-hop data (which is outside the attackers control), it causes the evo-pfemand process to crash, impacting all traffic forwarding until the automatic process restart has completed. This issue affects Junos OS Evolved on QFX Series: * all 23.2 versions,  * 23.4 versions before 23.4R2-S7-EVO, * 24.2 versions before 24.2R2-S5-EVO, * 24.4 versions before 24.4R2-S3-EVO, * 25.2 versions before 25.2R2-EVO.

Severity
MEDIUM
CVSS score
6.0 (v4.0)
Vulnerability status
Analyzed
Source identifier
[email protected]
Published
2026-07-09 22:17:08.453000
Last modified
2026-10-25 15:10:00.147000
View original CVE JSON 
{
  "id": "CVE-2026-57029",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-09T22:17:08.453",
  "lastModified": "2026-10-25T15:10:00.147",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS).\n\n\nWhen the reachability of an sFlow collector changes, the corresponding next-hop entry is updated. If this update occurs simultaneously with the sFlow thread accessing the next-hop data (which is outside the attackers control), it causes the evo-pfemand process to crash, impacting all traffic forwarding until the automatic process restart has completed.\n\n\n\n\nThis issue affects Junos OS Evolved on QFX Series:\n\n\n  *  all 23.2 versions, \n  *  23.4 versions before 23.4R2-S7-EVO,\n  *  24.2 versions before 24.2R2-S5-EVO,\n  *  24.4 versions before 24.4R2-S3-EVO,\n  *  25.2 versions before 25.2R2-EVO."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de sincronización faltante en el gestor del colector de flujo de Juniper Networks Junos OS Evolved en la serie QFX permite a un atacante adyacente y no autenticado causar una denegación de servicio (DoS).\n\nCuando cambia la accesibilidad de un colector sFlow, la entrada de siguiente salto correspondiente se actualiza. Si esta actualización ocurre simultáneamente con el hilo sFlow accediendo a los datos del siguiente salto (lo cual está fuera del control del atacante), causa que el proceso evo-pfemand falle, impactando todo el reenvío de tráfico hasta que se haya completado el reinicio automático del proceso.\n\nEste problema afecta a Junos OS Evolved en la serie QFX:\n\n  *  todas las versiones 23.2,\n  *  versiones 23.4 anteriores a 23.4R2-S7-EVO,\n  *  versiones 24.2 anteriores a 24.2R2-S5-EVO,\n  *  versiones 24.4 anteriores a 24.4R2-S3-EVO,\n  *  versiones 25.2 anteriores a 25.2R2-EVO."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS Evolved",
          "defaultStatus": "unaffected",
          "platforms": [
            "QFX Series"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "23.4R2-S7-EVO",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "24.2",
              "lessThan": "24.2R2-S5-EVO",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "24.4",
              "lessThan": "24.4R2-S3-EVO",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "25.2",
              "lessThan": "25.2R2-EVO",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X",
          "baseScore": 6.0,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "LOW",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "YES",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "MODERATE",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-10T14:44:51.065414Z",
          "id": "CVE-2026-57029",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-820"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1EC14A0-074B-445D-BDF8-7B54E38712F7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:-:*:*:*:*:*:*",
              "matchCriteriaId": "9D7F0D73-85EE-4A07-B51B-6BF52ECBA75E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1:*:*:*:*:*:*",
              "matchCriteriaId": "FE777A1F-9CD9-426E-AF1C-FBE01EB9A4A8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s1:*:*:*:*:*:*",
              "matchCriteriaId": "7147BA60-30A5-4CED-9AAF-F6BEA0528B89"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r1-s2:*:*:*:*:*:*",
              "matchCriteriaId": "6E5CE59B-14B2-4F4C-81B5-0430EC954956"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2:*:*:*:*:*:*",
              "matchCriteriaId": "FB82B22F-9005-4EF0-A1E3-4261757783D4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s1:*:*:*:*:*:*",
              "matchCriteriaId": "0224D3F1-8B86-432C-8F5B-B4B7B69ADF31"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s2:*:*:*:*:*:*",
              "matchCriteriaId": "EB2FE5FE-0ADE-406E-A23D-FDCC104B2496"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s3:*:*:*:*:*:*",
              "matchCriteriaId": "2E58987A-D7B7-4FFF-9969-E8FD76AE2BE3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s4:*:*:*:*:*:*",
              "matchCriteriaId": "E779C0D4-A8F7-4976-B3C8-B9802B96E715"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s5:*:*:*:*:*:*",
              "matchCriteriaId": "C7457415-D893-474B-ABA6-9841BB5CC6DB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:23.4:r2-s6:*:*:*:*:*:*",
              "matchCriteriaId": "3EFB8038-F336-4038-9AEA-C24253FAD578"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:-:*:*:*:*:*:*",
              "matchCriteriaId": "0DD89AAD-C615-42AF-B8AF-E6067862F0F5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1:*:*:*:*:*:*",
              "matchCriteriaId": "28AFF11D-E418-4A76-B557-F60622602537"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r1-s2:*:*:*:*:*:*",
              "matchCriteriaId": "0A86A69D-2B90-4B3B-A6EC-88358284787D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2:*:*:*:*:*:*",
              "matchCriteriaId": "080BEA58-9667-4C2C-810D-DC1187DB67DA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s1:*:*:*:*:*:*",
              "matchCriteriaId": "34072A94-CFEB-4FAA-8E68-E98D4F7602E4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s2:*:*:*:*:*:*",
              "matchCriteriaId": "C79FF7EC-AD91-4F9F-B8AC-B1A9C9271816"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s3:*:*:*:*:*:*",
              "matchCriteriaId": "7C61DC50-CAB6-4197-90C8-A2B48EE8F761"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.2:r2-s4:*:*:*:*:*:*",
              "matchCriteriaId": "178FFC73-28CC-471E-A1E8-1AF8BC731DD6"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:-:*:*:*:*:*:*",
              "matchCriteriaId": "B32ADA05-5F5D-45B6-BB7B-3FA6A6F229F5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1:*:*:*:*:*:*",
              "matchCriteriaId": "D6526E82-A6A6-4A65-9B01-B3FCB947F44E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s2:*:*:*:*:*:*",
              "matchCriteriaId": "CF3B74FA-DF84-4E3E-BCF9-44EEF9E45910"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r1-s3:*:*:*:*:*:*",
              "matchCriteriaId": "DC024CDE-DA63-4E87-BA97-5E8C06B0D8B7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2:*:*:*:*:*:*",
              "matchCriteriaId": "25DA0DD2-E974-448C-BD05-ED6FCA4725FB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s1:*:*:*:*:*:*",
              "matchCriteriaId": "C5F6F47F-0C86-4554-8517-A6A0CD29B3B0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:24.4:r2-s2:*:*:*:*:*:*",
              "matchCriteriaId": "8EDB7A3C-D1F5-4D24-8B8C-F104EC8C7D42"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:-:*:*:*:*:*:*",
              "matchCriteriaId": "DAF96553-DB70-4DFA-8658-306A7477DD06"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1:*:*:*:*:*:*",
              "matchCriteriaId": "83C415EF-E87B-4259-A836-59B3A9C3914B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s1:*:*:*:*:*:*",
              "matchCriteriaId": "AFD32E67-9D8D-437D-96BC-CA97A1F686BA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:25.2:r1-s2:*:*:*:*:*:*",
              "matchCriteriaId": "0E5D9967-1B53-427B-9B23-77DC399F3D71"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1453E42A-77B3-4922-8EC3-1A5668C39550"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "26408465-BD6A-4416-B98E-691A5F651080"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "79A8847B-4F98-4949-8639-5CD2B411D10F"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5140:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3F14350-BB10-411D-B144-FC762CA2608C"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDC5478F-A047-4F6D-BB11-0077A74C0174"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D877320D-1997-4B66-B11B-864020C755E1"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D193BEBD-9436-468D-B89E-D5720603451D"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5230-64cd:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F3D09BE-C16F-4E77-B6FB-C0C58BBD7675"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5240:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ABF8F9D-45C1-4554-A213-435A68709FCB"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5241:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "685120A6-7005-4ECB-A37F-0F225BB92676"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5250:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "574756C3-F97D-4193-A074-3091F978A1DC"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:juniper:qfx5700:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7D6C74F-E85F-4D62-BDAF-FE619B467C76"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://supportportal.juniper.net/JSA110089",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}