CVE-2026-103391
CVE-2026-103391 · Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with a crafted TCP option length.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
session smart router
- Versions
- ≥ 0, < 7.0.5: Affected (custom)
- ≥ 7.1.0, < 7.1.7: Affected (custom)
- ≥ 7.2.0, < 7.2.3: Affected (custom)
Update to 7.0.5; Update to 7.1.7; Update to 7.2.3