The Juniper Networks Junos OS and Junos OS Evolved vulnerability is an improper control of a resource that allows an adjacent eBGP peer to trigger a crash in the routing protocol daemon (rpd). When a BGP route update is received while RIB sharding is enabled, the daemon terminates, disrupting the device’s core routing function. This flaw falls under CWE‑664 and can lead to denial of service for the affected network node.

Affected vendors include Juniper Networks. The products impacted are Junos OS and Junos OS Evolved, beginning with the listed releases that contain the fix (23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1, and all subsequent releases of the main line; and the corresponding EVO releases). The issue specifically affects systems where RIB sharding is configured.

The CVSS score of 8.7 indicates a high severity vulnerability. The EPSS score is < 1% and indicates a very low probability of exploitation. The flaw is not listed in the CISA KEV catalog. The likely attack vector is a BGP update sent from an adjacent eBGP peer; an attacker with the ability to send such updates—or by compromising a peer—can trigger the crash. Because the crash disrupts routing services, the impact can cascade to downstream networks in some deployments.