Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-103391

Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with a crafted TCP option length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Session Smart Router

Default version status: unaffected

  • 0 to < 7.0.5affected
  • 7.1.0 to < 7.1.7affected
  • 7.2.0 to < 7.2.3affected

References