Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-103393

Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a system fault via a specially crafted VRRPv3 advertisement.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Session Smart Router

Default version status: unaffected

  • 0 to < 7.0.5affected
  • 7.1.0 to < 7.1.7affected
  • 7.2.0 to < 7.2.3affected

References