CVE-2026-102017 Juniper Networks CVE debrief

Who should care

Network administrators and security teams responsible for managing Junos OS and Junos OS Evolved systems should assess their exposure and prioritize patching to prevent potential routing-plane denial of service attacks.

Why it matters

CVE-2026-102017 is a medium-severity vulnerability in Junos OS and Junos OS Evolved that can cause a routing-plane denial of service. Network administrators and security teams should prioritize verifying exposure and applying patches to prevent potential attacks.

• Verify exposure by checking affected versions of Junos OS and Junos OS Evolved
• Apply patches or updates to fix the vulnerability
• Monitor network traffic for potential Auto-RP mapping announcements

Technical summary

An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled. The vulnerability has a CVSS score of 6.5 and is classified as medium-severity. Affected versions of Junos OS and Junos OS Evolved need to be verified, and patches or updates should be applied to fix the vulnerability. Network administrators and security teams should prioritize verifying exposure and applying patches to prevent potential attacks.

Defensive priority

Network administrators and security teams should prioritize verifying exposure and applying patches, as an unauthenticated attacker can cause a routing-plane denial of service via Auto-RP mapping announcements when Auto-RP mapping is enabled.

Recommended defensive actions

• Verify exposure by checking the affected versions of Junos OS and Junos OS Evolved
• Apply patches or updates to fix the vulnerability
• Monitor network traffic for potential Auto-RP mapping announcements
• Consider implementing compensating controls to mitigate the risk
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected versions of Junos OS and Junos OS Evolved. However, there is limited information on potential exploits or attacks.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.