Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-101970

Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash the routing daemon via specific PIM messages when sparse mode PIM is configured.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 23.2R2-S7.7affected
  • 23.4 to < 23.4R2-S8.13affected
  • 24.2 to < 24.2R2-S5.5affected
  • 24.4 to < 24.4R2-S5affected
  • 25.2 to < 25.2R2-S2affected
  • 25.4 to < 25.4R1-S3affected
  • 26.2 to < 26.2R1-S2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 23.2R2-S7.7-EVOaffected
  • 23.4 to < 23.4R2-S8.11-EVOaffected
  • 24.2 to < 24.2R2-S5.6-EVOaffected
  • 24.4 to < 24.4R2-S5-EVOaffected
  • 25.2 to < 25.2R2-S2-EVOaffected
  • 25.4 to < 25.4R1-S3-EVOaffected
  • 26.2 to < 26.2R1-S2-EVOaffected
  • 23.4X100affected
  • 25.2X100 to < 25.2X100-D35-EVOaffected
  • 25.4X300 to < 25.4X300-D40-EVOaffected

References