6.5Orta

CVE-2026-101959Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash

Juniper Networks Junos OS; Juniper Networks Junos OS Evolved Yayım: (28 gün önce)

Açıklama

A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping.

Zayıflık türü (CWE): CWE-688

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2
Juniper Networks Junos OS Evolved < 23.2R2-S7.7-EVO, 23.4 – < 23.4R2-S8.11-EVO, 24.2 – < 24.2R2-S5.6-EVO, 24.4 – < 24.4R2-S5-EVO, 25.2 – < 25.2R2-S2-EVO, 25.4 – < 25.4R1-S3-EVO, 26.2 – < 26.2R1-S2-EVO, 23.4X100, 25.2X100 – < 25.2X100-D35-EVO, 25.4X300 – < 25.4X300-D40-EVO

Kaynaklar ve yamalar