CVE-2026-102051
CVE-2026-102051 · Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast receive processing is enabled.
CVSS 7.1 · Élevée · EPSS 0,3% · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
junos os
- Versions du logiciel
- ≥ 0, < 23.2R2-S7.7: Concernée (custom)
- ≥ 23.4, < 23.4R2-S8.13: Concernée (custom)
- ≥ 24.2, < 24.2R2-S5.5: Concernée (custom)
- ≥ 24.4, < 24.4R2-S5: Concernée (custom)
- ≥ 25.2, < 25.2R2-S2: Concernée (custom)
- ≥ 25.4, < 25.4R1-S3: Concernée (custom)
- ≥ 26.2, < 26.2R1-S2: Concernée (custom)
Mettez à jour vers 23.2R2-S7.7
junos os evolved
- Versions du logiciel
- ≥ 0, < 23.2R2-S7.7-EVO: Concernée (custom)
- ≥ 23.4, < 23.4R2-S8.11-EVO: Concernée (custom)
- ≥ 24.2, < 24.2R2-S5.6-EVO: Concernée (custom)
- ≥ 24.4, < 24.4R2-S5-EVO: Concernée (custom)
- ≥ 25.2, < 25.2R2-S2-EVO: Concernée (custom)
- ≥ 25.4, < 25.4R1-S3-EVO: Concernée (custom)
- ≥ 26.2, < 26.2R1-S2-EVO: Concernée (custom)
- 23.4X100: Concernée (custom)
- ≥ 25.2X100, < 25.2X100-D35-EVO: Concernée (custom)
- ≥ 25.4X300, < 25.4X300-D40-EVO: Concernée (custom)
Mettez à jour vers 23.2R2-S7.7-EVO; Mettez à jour vers 24.2R2-S5.6-EVO