Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-101950

Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, and 2 more
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.

Affected versions

  • Juniper Networks Junos OS

    fixed in 23.2R2-S7.7; From 23.4 · fixed in 23.4R2-S8.13; From 24.2 · fixed in 24.2R2-S5.5; From 24.4 · fixed in 24.4R2-S5; From 25.2 · fixed in 25.2R2-S2; From 25.4 · fixed in 25.4R1-S3; From 26.2 · fixed in 26.2R1-S2

References 1

supportportal.juniper.net