CVE-2026-102032

Awaiting Analysis Awaiting Analysis - Queue

Memory Leak in Juniper Junos OS l2ald Process

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via crafted packets when the static MAC-IP feature is in use.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102032

EUVD

EUVD-2026-101357

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a Missing Release of Memory after Effective Lifetime issue in Juniper Networks Junos OS and Junos OS Evolved. It affects the l2ald process and can be exploited by an unauthenticated adjacent attacker sending crafted packets when the static MAC-IP feature is enabled.

Detection Guidance

Monitor the l2ald process for crashes or high CPU usage using commands like 'show system processes extensive | match l2ald' or 'show log messages | match l2ald'. Check for memory leaks with 'show system memory' and inspect network traffic for crafted packets targeting the static MAC-IP feature.

Impact Analysis

An attacker could cause a denial of service by triggering memory leaks in the l2ald process, potentially disrupting network operations and services that rely on the static MAC-IP feature.

Compliance Impact

This vulnerability causes a denial of service via crafted packets when the static MAC-IP feature is in use, which could disrupt network availability. Disruptions may impact systems handling sensitive data, potentially violating compliance requirements for availability in standards like GDPR (Article 32) and HIPAA (Security Rule).

Mitigation Strategies

Disable the static MAC-IP probing mechanism by configuring 'set protocols l2-learning arp-nd-probe-disable' under the Junos OS CLI. Update to a patched Junos OS or Junos OS Evolved version if available. Restrict access to the network segment where static MAC-IP is used to trusted devices only.

Hi! I’m here to help you understand CVE-2026-102032. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70