CVE-2026-102180

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Networks Junos OS and Junos OS Evolved

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP RIB streaming telemetry subscription is active. This issue does not affect Junos OS versions prior to 22.1R1. This issue does not affect Junos OS Evolved versions prior to 22.1R1-EVO.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102180

EUVD

EUVD-2026-101396

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow in Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon (rpd). An attacker with access to a configured BGP peering session can exploit it by sending a specially crafted BGP route attribute during an active BGP RIB streaming telemetry subscription, causing a denial of service.

Detection Guidance

This vulnerability requires monitoring for BGP peering sessions with active RIB streaming telemetry on affected Junos OS versions. Check for crashes in the routing protocol daemon (rpd) during BGP route attribute processing. Monitor logs for segmentation faults or abnormal terminations in rpd processes.

Impact Analysis

The vulnerability allows an attacker to crash the routing protocol daemon, leading to a denial of service. This disrupts network operations, causes connectivity loss, and may require manual intervention to restore service.

Compliance Impact

This vulnerability causes a denial of service in Juniper Junos OS and Junos OS Evolved systems by exploiting a stack-based buffer overflow in the routing protocol daemon during BGP peering sessions. While it does not directly impact data confidentiality or integrity, the resulting service disruption could affect availability of critical network services, potentially violating compliance requirements for uptime and reliability in standards like GDPR and HIPAA.

Mitigation Strategies

Disable BGP RIB streaming telemetry subscriptions if active. Ensure Junos OS and Junos OS Evolved versions are updated to 22.1R1 or later to avoid this issue.

Hi! I’m here to help you understand CVE-2026-102180. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70