Database/Firmware, BMC & network fabric
Junos rpd: malformed BGP MCAST-VPN updates from an eBGP peer hit an assertion and crash rpd
Impact
Malformed BGP MCAST-VPN updates from a configured eBGP peer reach an assertion in rpd and crash the routing daemon. It is a separate code path from the MVPN signaling and inter-region bugs in the same advisory - the fault is in parsing the update rather than in signalling state or cleanup - so patching one does not cover the others. The impact is the familiar one: all routing on the device goes down, not just multicast.
Who can reach it
A configured eBGP peer able to send MCAST-VPN updates to the device.
What to do
Upgrade Junos OS / Junos OS Evolved to a release from Juniper JSA112187; the upgrade reboots the device. Removing the MCAST-VPN address family from sessions that do not need it removes the trigger with a commit instead of a window.
References
Related entries
- Junos rpd: malformed BGP SRv6 service route crashes the routing daemon when SRv6 dynamic tunnels are enabledCVE-2026-102065 · Juniper Junos OS / Junos OS Evolved rpd (BGP-signaled SRv6 service routes, dynamic tunnels)High
- Junos OS: stack overflow in the dot1x daemon lets an ICCP peer crash or own a Fusion ADCVE-2026-102069 · Juniper Junos OS dot1x daemon on Fusion Aggregation Devices (ICCP sync)High
- Junos OS MX/SPC3: malformed IPv6 packets exhaust NAT sessions until the device is rebootedCVE-2026-102077 · Juniper Junos OS Packet Forwarding Engine on MX Series with SPC3 (source NAT session handling)High
- Junos OS SRX/MX with SPC3: PFE memory leak under connection churn causes complete traffic lossCVE-2026-102081 · Juniper Junos OS Packet Forwarding Engine on SRX4000/SRX5000 and MX with SPC3 (service plugin memory leak)High
- Junos OS on SRX: stack overflow in iked lets an authenticated VPN client run code as rootCVE-2026-102174 · Juniper Junos OS on SRX Series (iked, remote-access VPN authentication and JIMS identity publishing)High
- Junos OS: buffer overflow in the SDK service process can compromise the Routing EngineCVE-2026-102176 · Juniper Junos OS SDK service process (JDAF routing instance)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.