CVE-2026-101964: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CWE-617) exists in the rpd component of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker with adjacency to the target device to send a crafted LDP packet that triggers a reachable assertion failure, causing the rpd process to crash. The crash leads to a denial of service condition. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS 3.1 base score is 6.5, reflecting medium severity with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.

Successful exploitation causes the routing protocol daemon (rpd) to crash, resulting in denial of service. There is no impact on confidentiality or integrity. The attack requires adjacency to the target device and no privileges or user interaction are needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, network administrators should consider limiting adjacency to untrusted devices and monitor LDP sessions for anomalous packets.