Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-101944

Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 23.2R2-S7.7affected
  • 23.4 to < 23.4R2-S8.13affected
  • 24.2 to < 24.2R2-S5.5affected
  • 24.4 to < 24.4R2-S5affected
  • 25.2 to < 25.2R2-S2affected
  • 25.4 to < 25.4R1-S3affected
  • 26.2 to < 26.2R1-S2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 23.2R2-S7.7-EVOaffected
  • 23.4 to < 23.4R2-S8.11-EVOaffected
  • 24.2 to < 24.2R2-S5.6-EVOaffected
  • 24.4 to < 24.4R2-S5-EVOaffected
  • 25.2 to < 25.2R2-S2-EVOaffected
  • 25.4 to < 25.4R1-S3-EVOaffected
  • 26.2 to < 26.2R1-S2-EVOaffected
  • 23.4X100affected
  • 25.2X100 to < 25.2X100-D35-EVOaffected
  • 25.4X300 to < 25.4X300-D40-EVOaffected

References