CVE-2026-102045

Awaiting Analysis Awaiting Analysis - Queue

Out-of-bounds Write in Juniper Networks Junos OS Evolved LACPD

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102045

EUVD

EUVD-2026-101369

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an Out-of-bounds Write issue in the lacpd component of Juniper Networks Junos OS Evolved. It allows a Layer-2-adjacent attacker to cause a denial of service by sending a crafted frame to an LACP-enabled aggregated-Ethernet member port.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected crashes or high CPU usage in the lacpd process on Juniper Junos OS Evolved systems. Check logs for LACP-related errors or frame processing failures. Use commands like 'show system processes extensive | match lacpd' to verify process stability and 'show lacp statistics' to inspect LACP traffic patterns for anomalies.

Impact Analysis

The vulnerability can lead to a denial of service, causing network disruption or downtime for systems using Juniper Networks Junos OS Evolved with LACP-enabled aggregated-Ethernet ports.

Compliance Impact

This vulnerability causes a denial of service via crafted frames on LACP-enabled ports, which could disrupt network availability. Disruptions may impact systems handling sensitive data, potentially violating compliance requirements for availability in standards like GDPR or HIPAA.

Mitigation Strategies

Update Junos OS Evolved to the latest patched version to address the LACP out-of-bounds write vulnerability. Disable LACP on affected aggregated-Ethernet member ports if immediate patching is not possible.

Hi! I’m here to help you understand CVE-2026-102045. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70