CVE-2026-102184
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-1284
Impact
A configured EVPN peer can crash the routing protocol daemon (rpd), dropping routing adjacencies and causing network denial of service. The attacker needs to be an established BGP/EVPN signaling peer capable of sending route updates.
Root cause
The routing protocol daemon fails to properly validate input quantities when processing malformed SRv6 structures inside EVPN route updates.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Junos OS and Junos OS Evolved to the fixed releases listed in advisory JSA112187. As an interim workaround, restrict BGP EVPN peering sessions to trusted loopbacks via firewall filters or teardown untrusted EVPN neighbor relationships.
$ show versionAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 structure carried in an EVPN route update. The result is a denial of service affecting routing adjacencies.