CVE-2026-101994
Awaiting Analysis Awaiting Analysis - Queue

Improper Handling of Length Parameter Inconsistency in Juniper Junos OS l2ald

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description
An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed ICCP message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-16
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101994
EUVD
EUVD-2026-101477

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-130 The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Handling of Length Parameter Inconsistency in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service by sending a malformed ICCP message.

Detection Guidance

This vulnerability involves the l2ald daemon in Juniper Junos OS and Junos OS Evolved. Detection requires monitoring for malformed ICCP messages or unusual behavior in the l2ald process. Check logs for l2ald crashes or heap memory disclosures. Juniper recommends inspecting network traffic for ICCP protocol anomalies.

Impact Analysis

An attacker could exploit this to read sensitive memory or crash the system, leading to service disruption. If you use Juniper Networks Junos OS or Junos OS Evolved with MC-LAG ICCP peers, your system may be at risk of data leaks or downtime.

Compliance Impact

This vulnerability could lead to unauthorized memory disclosure, potentially exposing sensitive data. This may violate GDPR (data protection) or HIPAA (health data privacy) if personal or health information is leaked.

Mitigation Strategies

Apply the latest security patches from Juniper Networks for Junos OS and Junos OS Evolved to address the l2ald daemon vulnerability. Disable or restrict access to the MC-LAG ICCP peer configuration if not required. Monitor network traffic for malformed ICCP messages and implement network segmentation to limit exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101994. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart