A reachable assertion in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP neighbor to send a crafted LDP message that causes rpd to crash. The vulnerability is a CWE‑617 flaw and results in a denial‑of‑service state, interrupting routing functions on the affected device.

The flaw affects Juniper Networks Junos OS and Junos OS Evolved across numerous releases, including 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1, and all subsequent releases for both OS variants. Earlier releases (23.2, 23.4, 24.2 for OS and 23.2‑EVO, 23.4‑EVO, 24.2‑EVO for Evolved) contain specific respins, and any older builds must be replaced with the patched versions.

The CVSS score of 7.1 indicates moderate severity. The EPSS score is < 1%, and the vulnerability is not listed in CISA KEV. The attack vector is inferred to be remote, as it requires an attacker to control an LDP neighbor. Because the flaw exploits a reachable assertion through an LDP message, the risk is primarily to availability with potential for disruption of routing services, but no evidence of code execution or data exfiltration is presented in the advisory.