CVE-2026-102036
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-190
Impact
A configured EVPN BGP peer can crash the l2ald daemon and trigger a denial of service on the device by sending malformed EVPN Type-2 MAC/IP routes. The attacker needs an established BGP peering session to deliver the routes.
Root cause
An integer overflow or wraparound bug in the l2ald daemon when parsing EVPN Type-2 MAC/IP route updates.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Junos OS and Junos OS Evolved to the fixed releases listed in advisory JSA112187. As an interim workaround, restrict or tear down BGP peering sessions to untrusted EVPN peers.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes.