CVE-2026-102176
CVE-2026-102176 · Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.
CVSS 8.7 · Élevée · EPSS 0,3% · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
junos os
- Versions du logiciel
- ≥ 0, < 23.2R2-S7.7: Concernée (custom)
- ≥ 23.4, < 23.4R2-S8.13: Concernée (custom)
- ≥ 24.2, < 24.2R2-S5.5: Concernée (custom)
- ≥ 24.4, < 24.4R2-S5: Concernée (custom)
- ≥ 25.2, < 25.2R2-S2: Concernée (custom)
- ≥ 25.4, < 25.4R1-S3: Concernée (custom)
- ≥ 26.2, < 26.2R1-S2: Concernée (custom)
Mettez à jour vers 23.2R2-S7.7