CVE-2026-101944
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-190
Impact
An attacker can crash the routing protocol daemon (rpd) and cause a denial of service across the device. They need to establish an accepted EVPN BGP peer session to send crafted route updates.
Root cause
An integer overflow occurs in the rpd daemon when handling specially crafted EVPN route updates.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the fixed Junos OS / Junos OS Evolved releases specified in JSA112187. As an interim workaround, restrict EVPN BGP peering to trusted peers only or apply ingress routing policies to filter untrusted EVPN updates.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.