CVE-2026-102052

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Junos OS DHCPv4 Local-Client

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv4 local-client feature is used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102052

EUVD

EUVD-2026-101376

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the jdhcpd process when handling malformed DHCPv4 server responses. An adjacent unauthenticated attacker could exploit this to cause a denial of service or execute arbitrary code with root privileges if the DHCPv4 local-client feature is enabled.

Detection Guidance

This vulnerability can be detected by monitoring the jdhcpd process for crashes or unusual behavior when DHCPv4 local-client feature is enabled. Check logs for DHCP server responses causing stack overflows. Juniper recommends inspecting network traffic for malformed DHCPv4 packets targeting affected systems.

Impact Analysis

An attacker on the same network could crash your system or take full control of it, leading to service disruption or complete system compromise. This could expose sensitive data, allow unauthorized access, or disrupt network operations.

Compliance Impact

This vulnerability allows remote code execution with root privileges, which could lead to unauthorized access to sensitive data. This may violate compliance requirements for GDPR (data protection) and HIPAA (healthcare data security) by enabling data breaches or unauthorized disclosure.

Mitigation Strategies

Disable the DHCPv4 local-client feature on affected Juniper Networks Junos OS or Junos OS Evolved devices to prevent exploitation. Apply patches or updates from Juniper Networks as soon as they become available.

Hi! I’m here to help you understand CVE-2026-102052. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70