All vulnerabilities
CVE-2026-102051

Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled

Juniper Networks Junos OSNetwork & edge
CVSS
6.5Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 17% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in23.2R2-S7.7Also 23.4R2-S8.13, 24.2R2-S5.5 and 13 moreCVE List
Published14 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

Show all 16 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast receive processing is enabled.

Text from CVE List

Affected versions 17

  • Junos OSaffected: all versions before 23.2R2-S7.7CVE List
  • Junos OSaffected: 23.4 before 23.4R2-S8.13CVE List
  • Junos OSaffected: 24.2 before 24.2R2-S5.5CVE List
  • Junos OSaffected: 24.4 before 24.4R2-S5CVE List
  • Junos OSaffected: 25.2 before 25.2R2-S2CVE List
  • Junos OSaffected: 25.4 before 25.4R1-S3CVE List
  • Junos OSaffected: 26.2 before 26.2R1-S2CVE List
  • Junos OS Evolvedaffected: all versions before 23.2R2-S7.7-EVOCVE List
  • Junos OS Evolvedaffected: 23.4 before 23.4R2-S8.11-EVOCVE List
  • Junos OS Evolvedaffected: 24.2 before 24.2R2-S5.6-EVOCVE List
  • Junos OS Evolvedaffected: 24.4 before 24.4R2-S5-EVOCVE List
  • Junos OS Evolvedaffected: 25.2 before 25.2R2-S2-EVOCVE List
  • Junos OS Evolvedaffected: 25.4 before 25.4R1-S3-EVOCVE List
  • Junos OS Evolvedaffected: 26.2 before 26.2R1-S2-EVOCVE List
  • Junos OS Evolvedaffected: 23.4X100CVE List
  • Junos OS Evolvedaffected: 25.2X100 before 25.2X100-D35-EVOCVE List
  • Junos OS Evolvedaffected: 25.4X300 before 25.4X300-D40-EVOCVE List

References 1