CVE-2026-102067 — Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used

Description (CNA)

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a crafted RSVP packet when L2 LSP support is enabled.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Junos OS	affected 0 before 23.2R2-S7.7; affected 23.4 before 23.4R2-S8.13; affected 24.2 before 24.2R2-S5.5; affected 24.4 before 24.4R2-S5; affected 25.2 before 25.2R2-S2; affected 25.4 before 25.4R1-S3; affected 26.2 before 26.2R1-S2
Juniper Networks / Junos OS Evolved	affected 0 before 23.2R2-S7.7-EVO; affected 23.4 before 23.4R2-S8.11-EVO; affected 24.2 before 24.2R2-S5.6-EVO; affected 24.4 before 24.4R2-S5-EVO; affected 25.2 before 25.2R2-S2-EVO; affected 25.4 before 25.4R1-S3-EVO; affected 26.2 before 26.2R1-S2-EVO; affected 23.4X100; affected 25.2X100 before 25.2X100-D35-EVO; affected 25.4X300 before 25.4X300-D40-EVO

CWE

CWE-1284

References

https://supportportal.juniper.net/JSA112187

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.