Database/Firmware, BMC & network fabric
Junos rpd: BGP MVPN update crashes the routing daemon when an inter-region template is configured
Impact
Incomplete cleanup in rpd lets a configured MVPN neighbour cause a denial of service via a BGP MVPN update, on devices with an inter-region segmented VRF using protocols mvpn inter-region-template. The precondition is specific enough that most fleets are unaffected, but the devices that do run inter-region segmentation are typically the ones joining sites, where a routing outage spans more than one datacenter.
Who can reach it
A configured BGP MVPN neighbour. Requires an inter-region segmented VRF with the mvpn inter-region-template configuration.
What to do
Upgrade Junos OS / Junos OS Evolved per Juniper JSA112187; the upgrade reboots the device, and on an inter-site router that window needs coordinating with the other sites. Removing the inter-region-template configuration, where the design allows, removes the trigger.
References
Related entries
- Junos l2ald: EVPN Type-2 MAC/IP routes trigger an integer overflow and a Layer 2 learning outageCVE-2026-102036 · Juniper Junos OS / Junos OS Evolved l2ald (EVPN Type-2 MAC/IP route handling)High
- Junos OS on MX: infinite loop in netsctp.ko lets crafted SCTP traffic hang the deviceCVE-2026-102046 · Juniper Junos OS netsctp.ko on MX Series (SCTP processing)High
- Junos l2cpd: LLDP packets overflow a stack buffer, root code execution or Layer 2 control-plane denial of serviceCVE-2026-102049 · Juniper Junos OS / Junos OS Evolved l2cpd (LLDP processing)High
- Junos jdhcpd: malformed DHCPv4 server response gives root code execution on the deviceCVE-2026-102052 · Juniper Junos OS / Junos OS Evolved jdhcpd (DHCPv4 local-client)High
- Junos cfmd: CFM message to a down-MEP executes code as root with enhanced CFM mode enabledCVE-2026-102055 · Juniper Junos OS cfmd on MX Series / Junos OS Evolved on PTX Series (enhanced CFM)High
- Junos OS: stack overflow in jdhcpd lets an adjacent attacker break DHCP, relay and ZTPCVE-2026-102057 · Juniper Junos OS jdhcpd (DHCP client response handling)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.