An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.
History

Sat, 17 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved
Vendors & Products Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved

Wed, 14 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 14 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.
Title Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
Weaknesses CWE-130
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/R:A/V:C/RE:M'}


cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published: 2026-10-14T16:54:26.740Z

Updated: 2026-10-14T19:05:07.828Z

Reserved: 2026-09-28T17:35:40.523Z

Link: CVE-2026-102054

cve-icon Vulnrichment

Updated: 2026-10-14T19:04:27.769Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T17:18:00.433

Modified: 2026-10-15T16:23:06.250

Link: CVE-2026-102054

cve-icon Redhat

No data.