CVE-2026-102048
CVE-2026-102048 · Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is enabled on a VPLS routing instance with VLAN-VPLS encapsulation enabled. This issue affects all platforms except the PTX Series and SRX Series.
CVSS 7.1 · Alta · EPSS 0,3% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
junos os
- Versiones
- ≥ 0, < 23.2R2-S7.7: Afectada (custom)
- ≥ 23.4, < 23.4R2-S8.13: Afectada (custom)
- ≥ 24.2, < 24.2R2-S5.5: Afectada (custom)
- ≥ 24.4, < 24.4R2-S5: Afectada (custom)
- ≥ 25.2, < 25.2R2-S2: Afectada (custom)
- ≥ 25.4, < 25.4R1-S3: Afectada (custom)
- ≥ 26.2, < 26.2R1-S2: Afectada (custom)
Actualiza a 23.2R2-S7.7