Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-102018

Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 23.2R2-S7.7affected
  • 23.4 to < 23.4R2-S8.13affected
  • 24.2 to < 24.2R2-S5.5affected
  • 24.4 to < 24.4R2-S5affected
  • 25.2 to < 25.2R2-S2affected
  • 25.4 to < 25.4R1-S3affected
  • 26.2 to < 26.2R1-S2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 23.2R2-S7.7-EVOaffected
  • 23.4 to < 23.4R2-S8.11-EVOaffected
  • 24.2 to < 24.2R2-S5.6-EVOaffected
  • 24.4 to < 24.4R2-S5-EVOaffected
  • 25.2 to < 25.2R2-S2-EVOaffected
  • 25.4 to < 25.4R1-S3-EVOaffected
  • 26.2 to < 26.2R1-S2-EVOaffected
  • 23.4X100affected
  • 25.2X100 to < 25.2X100-D35-EVOaffected
  • 25.4X300 to < 25.4X300-D40-EVOaffected

References