Description
A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS | < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 | 23.2R2-S7.7 |
Advisories 1
- NCSC-2026-0430 Kwetsbaarheden verholpen in Juniper Networks Junos OS NCSC-NL (Netherlands) · Oct 16, 2026
References
- https://supportportal.juniper.net/JSA112188 vendor-advisory