CVE-2026-102175

Awaiting Analysis Awaiting Analysis - Queue

Heap-based Buffer Overflow in Juniper Networks Junos OS and Junos OS Evolved

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a crafted frame received over the service-deployment TCP connection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102175

EUVD

EUVD-2026-101391

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This is a Heap-based Buffer Overflow vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It exists in the sdxd service-deployment daemon. A remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection can exploit this by sending a crafted frame over the service-deployment TCP connection. This may allow the attacker to execute code as root or cause a denial of service.

Detection Guidance

This vulnerability involves a heap-based buffer overflow in the sdxd service-deployment daemon of Juniper Junos OS and Junos OS Evolved. Detection requires monitoring for unusual network traffic or service crashes on affected systems. Check for logs indicating crashes in the sdxd service or unexpected TCP connections to the service-deployment port. Juniper recommends inspecting network traffic for malformed frames targeting the SDX/SRC server connection.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain root-level access to your system, potentially leading to complete compromise of the device. It could also cause the sdxd service to crash, resulting in a denial of service affecting network services dependent on this daemon.

Compliance Impact

This vulnerability allows remote unauthenticated attackers to execute code as root or cause denial of service, which could lead to unauthorized access to sensitive data. This poses significant risks to compliance with GDPR (data protection) and HIPAA (health information privacy) due to potential data breaches and loss of confidentiality.

Mitigation Strategies

Immediately update Junos OS and Junos OS Evolved to the latest patched versions to address the heap-based buffer overflow in the sdxd service-deployment daemon. Disable the SDX/SRC server connection if not required to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-102175. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70