CVE-2026-101981 — Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled

Description (CNA)

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Junos OS	affected 23.4 before 23.4R2-S8.13; affected 24.2 before 24.2R2-S5.5; affected 24.4 before 24.4R2-S5; affected 25.2 before 25.2R2-S2; affected 25.4 before 25.4R1-S3; affected 26.2 before 26.2R1-S2
Juniper Networks / Junos OS Evolved	affected 23.4 before 23.4R2-S8.11-EVO; affected 24.2 before 24.2R2-S5.6-EVO; affected 24.4 before 24.4R2-S5-EVO; affected 25.2 before 25.2R2-S2-EVO; affected 25.4 before 25.4R1-S3-EVO; affected 26.2 before 26.2R1-S2-EVO; affected 23.4X100; affected 25.2X100 before 25.2X100-D35-EVO; affected 25.4X300 before 25.4X300-D40-EVO

CWE

CWE-121

References

https://supportportal.juniper.net/JSA112187

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.