CVE-2026-102183
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-1284
Impact
A configured BGP EVPN peer can crash the routing protocol daemon (rpd), causing a complete denial of service for routing operations. The attacker needs an established BGP EVPN peering session to send the malformed route.
Root cause
Improper input validation of specified quantities when parsing EVPN NLRI attributes causes the routing protocol daemon to crash.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the fixed Junos OS and Junos OS Evolved releases specified in advisory JSA112187. As an interim workaround, restrict BGP EVPN peering to trusted peers only or apply ingress route filters where possible.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause an rpd crash via a specifically malformed NLRI.