CVE-2026-102029
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-476
Impact
An adjacent PIM sender or configured MSDP peer can crash the routing protocol daemon (rpd), causing a network denial of service. The attacker only needs network adjacency or an existing MSDP peer relationship with policies using AS-path expansion.
Root cause
A NULL pointer dereference in the routing protocol daemon (rpd) triggered by processing MSDP or PIM policies configured with AS-path expansion.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the patched Junos OS / Junos OS Evolved releases specified in advisory JSA112187, or temporarily disable AS-path expansion in MSDP/PIM policies as an interim workaround.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion.