CVE-2026-101962
Awaiting Analysis Awaiting Analysis - Queue

Improper Handling of Length Parameter Inconsistency in Juniper Junos OS rpd

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempted to be readvertised to cause an rpd crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101962
EUVD
EUVD-2026-101314

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-130 The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a flaw in Juniper Networks Junos OS and Junos OS Evolved where a malformed BGP EVPN multicast update can cause the routing protocol daemon (rpd) to crash due to improper handling of length parameters.

Detection Guidance

This vulnerability involves a malformed BGP EVPN multicast update causing rpd crashes. Detection requires monitoring for rpd crashes or unusual BGP EVPN traffic patterns. Check logs for rpd crashes and inspect BGP EVPN updates for malformed packets. Juniper recommends monitoring system logs and using Junos OS tools like 'show system processes extensive' and 'show bgp neighbor' to detect anomalies.

Impact Analysis

An attacker could exploit this to cause a denial of service by crashing the rpd, disrupting network routing and potentially leading to loss of connectivity or service outages.

Compliance Impact

This vulnerability causes an rpd crash in Juniper Junos OS and Junos OS Evolved when processing malformed BGP EVPN multicast updates. This could lead to service disruption or denial of service, potentially impacting availability of critical network services. For compliance standards like GDPR or HIPAA, which require availability and integrity of data processing systems, such disruptions may result in non-compliance if they affect systems handling protected data.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved patches provided by Juniper Networks to address the improper handling of BGP EVPN multicast updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101962. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart