Description
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS | < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 | 23.2R2-S7.7 |
Advisories 1
- NCSC-2026-0430 Kwetsbaarheden verholpen in Juniper Networks Junos OS NCSC-NL (Netherlands) · Oct 16, 2026
References
- https://supportportal.juniper.net/JSA112188 vendor-advisory