{"schema":"threatline.record/2","record":{"id":"CVE-2026-101971","aliases":[],"summary":"Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled","details":"An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service and heap memory corruption via OSPFv3 messages on an enabled broadcast interface.","categories":["Network & edge"],"product":"Junos OS","vendor":"Juniper Networks","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"23.2R2-S7.7","status":"affected","version":"0","versionType":"custom"},{"lessThan":"23.4R2-S8.13","status":"affected","version":"23.4","versionType":"custom"},{"lessThan":"24.2R2-S5.5","status":"affected","version":"24.2","versionType":"custom"},{"lessThan":"24.4R2-S5","status":"affected","version":"24.4","versionType":"custom"},{"lessThan":"25.2R2-S2","status":"affected","version":"25.2","versionType":"custom"},{"lessThan":"25.4R1-S3","status":"affected","version":"25.4","versionType":"custom"},{"lessThan":"26.2R1-S2","status":"affected","version":"26.2","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Junos OS Evolved","vendor":"Juniper Networks","versions":[{"lessThan":"23.2R2-S7.7-EVO","status":"affected","version":"0","versionType":"custom"},{"lessThan":"23.4R2-S8.11-EVO","status":"affected","version":"23.4","versionType":"custom"},{"lessThan":"24.2R2-S5.6-EVO","status":"affected","version":"24.2","versionType":"custom"},{"lessThan":"24.4R2-S5-EVO","status":"affected","version":"24.4","versionType":"custom"},{"lessThan":"25.2R2-S2-EVO","status":"affected","version":"25.2","versionType":"custom"},{"lessThan":"25.4R1-S3-EVO","status":"affected","version":"25.4","versionType":"custom"},{"lessThan":"26.2R1-S2-EVO","status":"affected","version":"26.2","versionType":"custom"},{"status":"affected","version":"23.4X100","versionType":"custom"},{"lessThan":"25.2X100-D35-EVO","status":"affected","version":"25.2X100","versionType":"custom"},{"lessThan":"25.4X300-D40-EVO","status":"affected","version":"25.4X300","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"23.2R2-S7.7","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"23.4R2-S8.13","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"24.2R2-S5.5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"24.4R2-S5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"25.2R2-S2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"25.4R1-S3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"26.2R1-S2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"23.2R2-S7.7-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"23.4R2-S8.11-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"24.2R2-S5.6-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"24.4R2-S5-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"25.2R2-S2-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"25.4R1-S3-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"26.2R1-S2-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"25.2X100-D35-EVO","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","source_modified_at":"2026-10-14T20:15:53.949Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS Evolved","ecosystem":null},"version":"25.4X300-D40-EVO","basis":"first unaffected version stated in the CVE record"}],"cvss":6.5,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00269,"percentile":0.18049,"score_date":"2026-10-23"},"published_at":"2026-10-14T16:43:52.308Z","modified_at":"2026-10-14T20:15:53.949Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-101971","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T20:15:53.949Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-101971","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://supportportal.juniper.net/JSA112187","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-14T20:15:18.484500Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-14T20:15:53.949Z","content_hash":"f58d7703e531d49ce2bed037a015e39ad577e575d9b3c0b236aef8fcd7439cd6"}}