CVE-2026-101974
Full vulnerability record from the local CVENow database.
Description
An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets.
Severity
HIGH
CVSS score
7.1
(v4.0)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-14 17:17:50.037000
Last modified
2026-10-29 13:17:02.487000
View original CVE JSON
{
"id": "CVE-2026-101974",
"sourceIdentifier": "[email protected]",
"published": "2026-10-14T17:17:50.037",
"lastModified": "2026-10-29T13:17:02.487",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Juniper Networks",
"product": "Junos OS",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "23.2R2-S7.7",
"versionType": "custom",
"status": "affected"
},
{
"version": "23.4",
"lessThan": "23.4R2-S8.13",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.2",
"lessThan": "24.2R2-S5.5",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.4",
"lessThan": "24.4R2-S5",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.2",
"lessThan": "25.2R2-S2",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.4",
"lessThan": "25.4R1-S3",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.2",
"lessThan": "26.2R1-S2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Juniper Networks",
"product": "Junos OS Evolved",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "23.2R2-S7.7-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "23.4",
"lessThan": "23.4R2-S8.11-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.2",
"lessThan": "24.2R2-S5.6-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.4",
"lessThan": "24.4R2-S5-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.2",
"lessThan": "25.2R2-S2-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.4",
"lessThan": "25.4R1-S3-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.2",
"lessThan": "26.2R1-S2-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "23.4X100",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.2X100",
"lessThan": "25.2X100-D35-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.4X300",
"lessThan": "25.4X300-D40-EVO",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-14T20:16:23.940484Z",
"id": "CVE-2026-101974",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1284"
}
]
}
],
"references": [
{
"url": "https://supportportal.juniper.net/JSA112187",
"source": "[email protected]"
}
]
}