Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-103392

Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Session Smart Router

Default version status: unaffected

  • 0 to < 7.0.5affected
  • 7.1.0 to < 7.1.7affected
  • 7.2.0 to < 7.2.3affected

References