CVE-2026-102050

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Networks Junos OS

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated triggering may disrupt LLDP and other Layer 2 control protocols across the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102050

EUVD

EUVD-2026-101374

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a Stack-based Buffer Overflow vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It affects the l2cpd daemon and can be triggered by unauthenticated adjacent attackers sending LLDP packets to an interface configured for LLDP. This causes a denial of service in Layer 2 control-plane processing. Repeated exploitation may disrupt LLDP and other Layer 2 control protocols across the device.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual LLDP packet processing or crashes in the l2cpd daemon. Check system logs for LLDP-related errors or daemon crashes. Use commands like 'show system processes extensive | match l2cpd' to verify daemon status. Monitor network interfaces for unexpected LLDP traffic spikes with 'show lldp neighbors' or 'monitor interface traffic'.

Impact Analysis

An attacker could exploit this to cause a denial of service, disrupting network operations. This may lead to loss of network connectivity, degraded performance, or complete failure of Layer 2 control protocols like LLDP. Repeated attacks could have a broader impact on network stability.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by disrupting Layer 2 control-plane processing, potentially leading to unauthorized access or data exposure. Denial of service in LLDP and other Layer 2 protocols may compromise network integrity, affecting data availability and security controls required by these regulations.

Mitigation Strategies

Disable LLDP on affected interfaces if not required. Update Junos OS or Junos OS Evolved to the latest patched version. Apply firewall filters to block malformed LLDP packets. Restrict access to Layer 2 control protocols by limiting adjacent network access. Monitor device logs for signs of exploitation attempts.

Hi! I’m here to help you understand CVE-2026-102050. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70