CVE-2026-101982

Summary

A stack-based buffer overflow in Juniper's routing protocol daemon (rpd) allows remote attackers to execute code as root or crash the system when processing valid BGP/EVPN route advertisements. This represents a critical vulnerability that can lead to full system compromise.

Exploitability

Exploitation is relatively straightforward as it requires only sending specially crafted EVPN-VPWS route advertisements from a configured BGP peer, with no additional authentication or privilege requirements needed.

Blast radius

The vulnerability affects all Junos OS and Junos OS Evolved devices running the rpd daemon that have BGP/EVPN configured, potentially impacting large network infrastructures with multiple routing points.

Detection

Monitor for rpd process crashes in system logs, particularly around BGP peer connections and EVPN route advertisement events, and watch for unexpected restarts of the routing protocol daemon.

Prioritized remediation

Upgrade to Junos OS 23.4R3 or later, or Junos OS Evolved 23.4R3 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.