CVE-2026-102179

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Write in Juniper Junos OS and Junos OS Evolved BGP EVPN

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed. Successful exploitation can crash rpd and interrupt routing protocols until the daemon restarts and reconverges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102179

EUVD

EUVD-2026-101395

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an Out-of-bounds Write vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It affects the routing protocol daemon (rpd) and occurs when processing BGP EVPN routes with the l2vpn-evpn RIB telemetry sensor subscribed. An attacker with access to a configured BGP EVPN peer can exploit this to cause a denial of service by crashing rpd and interrupting routing protocols until the daemon restarts and reconverges.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes in the routing protocol daemon (rpd) and checking for BGP EVPN route processing issues. Monitor logs for rpd crashes or unexpected restarts. Check BGP EVPN route updates for malformed or excessive entries that could trigger the out-of-bounds write.

Impact Analysis

This vulnerability can cause network disruption by crashing the routing protocol daemon, leading to interrupted routing protocols and potential loss of network connectivity. It may result in downtime for services relying on the affected Junos OS or Junos OS Evolved devices until the daemon is manually restarted and routing reconverges.

Compliance Impact

This vulnerability causes a denial of service by crashing the routing protocol daemon, which interrupts routing protocols until recovery. This could disrupt network availability, potentially violating compliance requirements for uptime and data accessibility in standards like GDPR (data processing continuity) and HIPAA (system availability for protected health information).

Mitigation Strategies

Disable the l2vpn-evpn RIB telemetry sensor subscription if not required. Apply Junos OS or Junos OS Evolved patches from Juniper Networks when available. Restrict BGP EVPN peer access to trusted sources only.

Hi! I’m here to help you understand CVE-2026-102179. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70