---
id: CVE-2026-102029
title: >-
  A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd)
  of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated
  configured MSDP peer or adjacent PIM sender to cause a denial of service via
  an MSD…
summary: >-
  A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd)
  of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated
  configured MSDP peer or adjacent PIM sender to cause a denial of service via
  an MSD…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-476
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:17:56.303'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102029'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.651Z'
---

## Overview

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.