CVE-2026-102053
CVE-2026-102053 · Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming route processing.
CVSS 6.9 · Media · EPSS 0,3% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
junos os
- Versiones
- ≥ 0, < 23.2R2-S7.7: Afectada (custom)
- ≥ 23.4, < 23.4R2-S8.13: Afectada (custom)
- ≥ 24.2, < 24.2R2-S5.5: Afectada (custom)
- ≥ 24.4, < 24.4R2-S5: Afectada (custom)
- ≥ 25.2, < 25.2R2-S2: Afectada (custom)
- ≥ 25.4, < 25.4R1-S3: Afectada (custom)
- ≥ 26.2, < 26.2R1-S2: Afectada (custom)
Actualiza a 23.2R2-S7.7
junos os evolved
- Versiones
- ≥ 0, < 23.2R2-S7.7-EVO: Afectada (custom)
- ≥ 23.4, < 23.4R2-S8.11-EVO: Afectada (custom)
- ≥ 24.2, < 24.2R2-S5.6-EVO: Afectada (custom)
- ≥ 24.4, < 24.4R2-S5-EVO: Afectada (custom)
- ≥ 25.2, < 25.2R2-S2-EVO: Afectada (custom)
- ≥ 25.4, < 25.4R1-S3-EVO: Afectada (custom)
- ≥ 26.2, < 26.2R1-S2-EVO: Afectada (custom)
- 23.4X100: Afectada (custom)
- ≥ 25.2X100, < 25.2X100-D35-EVO: Afectada (custom)
- ≥ 25.4X300, < 25.4X300-D40-EVO: Afectada (custom)
Actualiza a 23.2R2-S7.7-EVO; Actualiza a 24.2R2-S5.6-EVO