---
id: CVE-2026-102051
title: >-
  An Improper Release of Memory Before Removing Last Reference vulnerability in
  the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms
  allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion
  and …
summary: >-
  An Improper Release of Memory Before Removing Last Reference vulnerability in
  the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms
  allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion
  and …
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-401
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:17:59.943'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102051'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.658Z'
---

## Overview

An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast receive processing is enabled.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.