CVE-2026-103392
CVE-2026-103392 · Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.
CVSS 4.8 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
session smart router
- Versions
- ≥ 0, < 7.0.5: Affected (custom)
- ≥ 7.1.0, < 7.1.7: Affected (custom)
- ≥ 7.2.0, < 7.2.3: Affected (custom)
Update to 7.0.5; Update to 7.1.7; Update to 7.2.3