Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-102067

Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a crafted RSVP packet when L2 LSP support is enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 23.2R2-S7.7affected
  • 23.4 to < 23.4R2-S8.13affected
  • 24.2 to < 24.2R2-S5.5affected
  • 24.4 to < 24.4R2-S5affected
  • 25.2 to < 25.2R2-S2affected
  • 25.4 to < 25.4R1-S3affected
  • 26.2 to < 26.2R1-S2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 23.2R2-S7.7-EVOaffected
  • 23.4 to < 23.4R2-S8.11-EVOaffected
  • 24.2 to < 24.2R2-S5.6-EVOaffected
  • 24.4 to < 24.4R2-S5-EVOaffected
  • 25.2 to < 25.2R2-S2-EVOaffected
  • 25.4 to < 25.4R1-S3-EVOaffected
  • 26.2 to < 26.2R1-S2-EVOaffected
  • 23.4X100affected
  • 25.2X100 to < 25.2X100-D35-EVOaffected
  • 25.4X300 to < 25.4X300-D40-EVOaffected

References