Description
An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.
Published: 2026-10-14
Score: 6.7 Medium
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Patch Update
AI Analysis

Impact

This vulnerability is an out‑of‑bounds write in the eventd process of Junos OS and Junos OS Evolved. A local attacker can send a specially crafted packet to the eventd relay service, causing the process to crash and resulting in a denial of service on the device. The flaw does not directly expose sensitive data or allow code execution, but it can disrupt network operations by taking the eventd process offline.

Affected Systems

The affected products are Juniper Networks Junos OS and Juniper Networks Junos OS Evolved. Affected releases include all versions prior to Junos OS 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1 and their corresponding Evolved releases (23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO and all subsequent releases. Specific respins are available for the 23.2, 23.4, and 24.2 series for both OS and Evolved.

Risk and Exploitability

The flaw is exploitable only by someone who already has local access to the device, not via a remote attack vector. The CVSS score of 6.7 indicates a moderate impact. EPSS data is not available, and the vulnerability is not listed in CISA's KEV catalog. The attack requires an attacker to send crafted packets to the eventd relay service, leading to a crash that disables event handling and potentially other dependent services, causing a denial of service for local users and traffic processed by the device.

Generated by OpenCVE AI on October 14, 2026 at 21:32 UTC.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: Junos OS: 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases. Junos OS Evolved: 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO, and all subsequent releases. Note: For Junos OS releases 23.2, 23.4, and 24.2, and Junos OS Evolved releases 23.2-EVO, 23.4-EVO, and 24.2-EVO, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.

Vendor Workaround

Use access lists and firewall filters to limit access to the device only from trusted hosts and administrators.

OpenCVE Recommended Actions

  • Apply any Junos OS or Junos OS Evolved release listed above or any newer release that contains the fix for eventd.
  • Configure access‑control lists and firewall filters on the device to allow connections only from trusted hosts and administrators, following the vendor‐recommended workaround.
  • If the eventd relay service is not required for your deployment, disable or restrict its operation to reduce the attack surface.

Generated by OpenCVE AI on October 14, 2026 at 21:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.
Title Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 6.7, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:M'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2026-10-14T20:15:54.759Z

Reserved: 2026-09-28T16:17:11.580Z

Link: CVE-2026-101934

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-14T17:17:45.763

Modified: 2026-10-14T21:17:20.713

Link: CVE-2026-101934

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-14T21:45:07Z

Weaknesses