CVE-2026-102017: CWE-787 Out-of-bounds Write in Juniper Networks Junos OS

This vulnerability (CVE-2026-102017) involves an out-of-bounds write in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated attacker can trigger a routing-plane denial of service by sending malicious Auto-RP mapping announcements when Auto-RP mapping is enabled. The issue affects a broad range of Junos OS versions before certain patch levels, including both standard and Evolved variants. The CVSS 3.1 base score is 6.5, reflecting medium severity with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service).

Successful exploitation results in a routing-plane denial of service, impacting the availability of the affected device's routing functions. There is no confidentiality or integrity impact reported. The attacker does not require authentication or privileges, increasing the risk of disruption in environments where Auto-RP mapping is enabled.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is not a cloud service, remediation depends on applying vendor-provided patches or updates. Until patches are applied, consider disabling Auto-RP mapping if feasible to mitigate exposure. Monitor Juniper Networks advisories for official fixes and instructions.