CVE-2026-102054

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

CVE-2026-102054

Juniper Networks Junos OS and Junos OS Evolved are affected by an Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM . An unauthenticated, adjacent attacker can exploit this by sending VXLAN overlay-ping traffic to a local VTEP, potentially resulting in the disclosure of s...

CVE-2026-102054 Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

EUVD-2026-101378

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

CVE-2026-102054: Improper Handling of Length Parameter Inconsistency

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...

CVE-2023-28984: Concurrent Execution using Shared Resource with Improper Synchronization

A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Service DoS. The PFE may crash when a lot of MAC learning and agin...

CVE-2022-22210

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the...

CVE-2022-22210 Junos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the...

Juniper Networks Junos OS code-related vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a code issue vulnerability that originates from an attacker being able to cause a denial of...

PT-2022-3885

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5000 Series, MX Series versions 20.3 through 20.3R3-S3 Juniper Networks Junos OS on QFX5000 Series, MX Series versions 20.4 through 20.4R3-S2 Juniper Networks Junos OS on QFX5000 Series, MX Series versions 21.2...