Description
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.
Published: 2026-10-14
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service or Routing Engine Compromise
Action: Apply Patch
AI Analysis

Impact

A classic buffer overflow exists in the SDK service of Juniper Networks Junos OS. Attackers can send crafted packets when the SDK service and a JDAF routing instance are enabled, causing the SDK service to crash or the device's Routing Engine to be compromised. The vulnerability can therefore lead to service disruption or unauthorized control over the device.

Affected Systems

Systems running Juniper Networks Junos OS where the SDK service is enabled and a JDAF routing instance is configured. Affected releases include 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases. Historically, respins were released for earlier versions of 23.2, 23.4, and 24.2.

Risk and Exploitability

The CVSS score of 8.7 indicates high risk, while the EPSS score of less than 1% suggests currently low exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The description states that an unauthenticated network attacker can trigger the overflow by sending specific packets when the SDK service and JDAF routing instance are enabled, which may result in a denial of service or compromise of the Routing Engine.

Generated by OpenCVE AI on October 15, 2026 at 16:03 UTC.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: Junos OS: 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases. Note: For Junos OS releases 23.2, 23.4, and 24.2, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.

Vendor Workaround

Disable sdk-service if it is not required.

OpenCVE Recommended Actions

  • Update Junos OS to a release that includes the fix for the SDK service buffer overflow (e.g., 23.2R2-S7.7 or later).
  • If an immediate update is not possible, temporarily disable the sdk-service to eliminate the vulnerability surface.
  • If disabling sdk-service is not feasible, restrict network traffic to the SDK service port or remove any JDAF routing instance from the device configuration.

Generated by OpenCVE AI on October 15, 2026 at 16:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Juniper Networks
Juniper Networks junos Os
Vendors & Products Juniper Networks
Juniper Networks junos Os

Fri, 16 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 14 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.
Title Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled
Weaknesses CWE-120
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:M'}

Subscriptions

Juniper Networks Junos Os
cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2026-10-16T16:36:09.763Z

Reserved: 2026-09-28T18:17:13.470Z

Link: CVE-2026-102176

cve-icon Vulnrichment

Updated: 2026-10-16T16:36:05.278Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T17:18:05.303

Modified: 2026-10-16T17:17:10.110

Link: CVE-2026-102176

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T01:00:13Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')