---
id: CVE-2026-101995
title: "An\_Improper Validation of Specified Quantity in Input vulnerability in the \n\nl2ald \n\nof Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disrupt…"
summary: "An\_Improper Validation of Specified Quantity in Input vulnerability in the \n\nl2ald \n\nof Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disrupt…"
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-1284
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:17:52.403'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101995'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.641Z'
---

## Overview

An Improper Validation of Specified Quantity in Input vulnerability in the 

l2ald 

of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.