Description
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities to cause a Denial-of-Service (DoS) as rpd crashes when graceful-shutdown sender community is added when attempting to advertise.
Metrics
CVSS 3.1 6.8/10
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | < 23.2R2-S7.7; >= 23.4, < 23.4R2-S8.13; >= 24.2, < 24.2R2-S5.5; >= 24.4, < 24.4R2-S5; >= 25.2, < 25.2R2-S2; >= 25.4, < 25.4R1-S3; >= 26.2, < 26.2R1-S2 |
| Juniper Networks | Junos OS Evolved | < 23.2R2-S7.7-EVO; >= 23.4, < 23.4R2-S8.11-EVO; >= 24.2, < 24.2R2-S5.6-EVO; >= 24.4, < 24.4R2-S5-EVO; >= 25.2, < 25.2R2-S2-EVO; >= 25.4, < 25.4R1-S3-EVO; >= 26.2, < 26.2R1-S2-EVO; 23.4X100; >= 25.2X100, < 25.2X100-D35-EVO; >= 25.4X300, < 25.4X300-D40-EVO |
References
Timeline
- Published
- Oct 14, 2026
- Last modified
- Oct 15, 2026
- NVD status
- Awaiting Analysis