Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 14, 2026 · NIST NVD

   Detected

   A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.

2. Oct 15, 2026 · NIST NVD

   Updated

   A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.

Affected

• vendor Juniper Networks Junos OSversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-102176

  A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-102176

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-102176

  A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when

  nvd.nist.gov

References

• Reference · supportportal.juniper.net