CVE-2026-101982
Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Junos OS and Junos OS Evolved

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-16
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101982
EUVD
EUVD-2026-101417

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack-based buffer overflow in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the routing protocol daemon (rpd) and can be triggered by a configured BGP/EVPN peer sending specially crafted route advertisements for an EVPN-VPWS service. On Junos OS, this can lead to root code execution, while on Junos OS Evolved, it causes the rpd to crash.

Detection Guidance

This vulnerability involves a stack-based buffer overflow in the routing protocol daemon (rpd) triggered by BGP/EVPN route advertisements for EVPN-VPWS services. Detection requires monitoring for unusual rpd crashes or abnormal memory usage patterns on affected Juniper devices running vulnerable Junos OS or Junos OS Evolved versions.

Impact Analysis

An attacker who exploits this vulnerability could gain root-level access on affected Junos OS systems or crash the rpd process on Junos OS Evolved. This could lead to unauthorized system control, service disruption, or denial of service for network routing functions.

Compliance Impact

This vulnerability allows remote code execution or crashes via BGP/EVPN route advertisements, which could lead to unauthorized access or data breaches. Such incidents may violate GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information, potentially resulting in non-compliance.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks immediately. Disable BGP/EVPN peering sessions if not required. Monitor rpd processes for crashes or unusual behavior. Restrict BGP/EVPN peer access to trusted networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101982. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart