---
id: CVE-2026-102067
title: >-
  An Improper Validation of Specified Quantity in Input vulnerability in the
  routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS
  Evolved allows an adjacent unauthenticated attacker to cause a denial of
  service via a cra…
summary: >-
  An Improper Validation of Specified Quantity in Input vulnerability in the
  routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS
  Evolved allows an adjacent unauthenticated attacker to cause a denial of
  service via a cra…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-1284
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:18:02.490'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102067'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.663Z'
---

## Overview

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a crafted RSVP packet when L2 LSP support is enabled.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.