A malformed RSVP packet causes the routing protocol daemon to crash due to improper validation of the packet’s quantity field, an example of CWE-1284. This crash results in a denial of service that brings the affected Junos device offline until it is restarted. No arbitrary code execution or data compromise is described, so the primary risk is service disruption.

Juniper Networks Junos OS and Junos OS Evolved systems are affected. The vulnerability impacts any device running the listed Junos OS releases—23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases—as well as the corresponding Junos OS Evolved releases—23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO, and all subsequent releases.

The CVSS score of 7.1 indicates moderate to high severity of the vulnerability. The EPSS score of <1% indicates a very low but nonzero likelihood of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a neighboring device that can send RSVP packets to the target interface, requiring no authentication. Given this proximity requirement, the risk is significant in environments where unmanaged traffic can reach these interfaces. Deployment of the vendor‑supplied updates is strongly recommended to mitigate the denial‑of‑service impact.