A crafted RSVP packet triggers improper validation in the routing protocol daemon, causing the rpd to crash. The crash results in a denial of service, potentially disabling routing services and disrupting network connectivity. The underlying weakness is identified as CWE‑1284.

The vulnerability affects Juniper Networks Junos OS and Junos OS Evolved platforms. Affected releases include 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1 and later for Junos OS, and the corresponding Evolved releases: 23.2R2‑S7.7‑EVO, 23.4R2‑S8.11‑EVO, 24.2R2‑S5.6‑EVO, 24.4R2‑S5‑EVO, 25.2R2‑S2‑EVO, 25.2X100‑D35‑EVO, 25.4R1‑S3‑EVO, 25.4R2‑EVO, 25.4X300‑D40‑EVO, 26.2R1‑S2‑EVO, 26.2R2‑EVO, 26.4R1‑EVO and later. Specific respins exist for earlier releases, with those rebuilt to address this issue.

The CVSS score of 7.1 denotes moderate‑to‑high severity. The EPSS score of 0.00254 indicates a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited public exploitation. Attackers must be adjacent to the device and able to send crafted RSVP packets while L2 LSP support is enabled. The risk is confined to service interruption rather than data compromise, as the vulnerability does not provide code execution or unauthorized access.