CVE-2026-101955
8.1HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
Remote unauthenticated attackers can execute arbitrary code or crash the device by injecting a malformed DNS packet. This requires UTM Anti-Spam SBL inspection to be actively enabled on the SRX firewall.
Root cause
A stack-based buffer overflow occurs in the UTM Anti-Spam SBL feature when parsing malformed DNS packets.
Affected systems
Juniper Networks Junos OS on SRX series; exact version ranges are not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched Junos OS release specified in Juniper advisory JSA112186. As an immediate workaround, disable Anti-Spam SBL inspection on affected UTM policies.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled.