Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-102065

Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 23.4affected
  • 24.2 to < 24.2R2-S5.5affected
  • 24.4 to < 24.4R2-S5affected
  • 25.2 to < 25.2R2-S2affected
  • 25.4 to < 25.4R1-S3affected
  • 26.2 to < 26.2R1-S2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 23.4affected
  • 24.2 to < 24.2R2-S5.6-EVOaffected
  • 24.4 to < 24.4R2-S5-EVOaffected
  • 25.2 to < 25.2R2-S2-EVOaffected
  • 25.4 to < 25.4R1-S3-EVOaffected
  • 26.2 to < 26.2R1-S2-EVOaffected
  • 23.4X100affected
  • 25.2X100 to < 25.2X100-D35-EVOaffected
  • 25.4X300 to < 25.4X300-D40-EVOaffected

References