---
id: CVE-2026-102054
title: >-
  An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM
  of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,
  adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping
  traffic…
summary: >-
  An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM
  of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,
  adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping
  traffic…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-130
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:17:01.693'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102054'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.659Z'
---

## Overview

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.