CVE-2026-101994

high

Description

An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed ICCP message.

References

https://supportportal.juniper.net/JSA112187

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101477

Details

Source: Mitre, NVD

Published: 2026-10-14

Updated: 2026-10-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Severity: High

CVSS v4

Base Score: 7.1

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:L

Severity: High

EPSS

EPSS: 0.00278