p PatchFirst

CVE-2026-101951

CVE-2026-101951 · Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent configured BGP peer to cause a denial of service by sending a specifically malformed BGP MCAST-TREE update and this NLRI is then attempted to be readvertised.

CVSS 8.7 · Alta · EPSS 0,4% · Corrección disponible

Publicación
Actualización

Productos y versiones afectados

  • junos os

    Versiones
    • ≥ 0, < 23.2R2-S7.7: Afectada (custom)
    • ≥ 23.4, < 23.4R2-S8.13: Afectada (custom)
    • ≥ 24.2, < 24.2R2-S5.5: Afectada (custom)
    • ≥ 24.4, < 24.4R2-S5: Afectada (custom)
    • ≥ 25.2, < 25.2R2-S2: Afectada (custom)
    • ≥ 25.4, < 25.4R1-S3: Afectada (custom)
    • ≥ 26.2, < 26.2R1-S2: Afectada (custom)

    Actualiza a 23.2R2-S7.7

  • junos os evolved

    Versiones
    • ≥ 0, < 23.2R2-S7.7-EVO: Afectada (custom)
    • ≥ 23.4, < 23.4R2-S8.11-EVO: Afectada (custom)
    • ≥ 24.2, < 24.2R2-S5.6-EVO: Afectada (custom)
    • ≥ 24.4, < 24.4R2-S5-EVO: Afectada (custom)
    • ≥ 25.2, < 25.2R2-S2-EVO: Afectada (custom)
    • ≥ 25.4, < 25.4R1-S3-EVO: Afectada (custom)
    • ≥ 26.2, < 26.2R1-S2-EVO: Afectada (custom)
    • 23.4X100: Afectada (custom)
    • ≥ 25.2X100, < 25.2X100-D35-EVO: Afectada (custom)
    • ≥ 25.4X300, < 25.4X300-D40-EVO: Afectada (custom)

    Actualiza a 23.2R2-S7.7-EVO; Actualiza a 24.2R2-S5.6-EVO

Fuentes originales

Comprueba tu servidor →