CVE-2026-103411

Published: Oct 28, 2026Modified: Nov 5, 2026

7.1

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Exploitability: 2.8 / Impact: 4.2

Source: sirt@juniper.net (Secondary)

Description

An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply.

Related CWEs

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (1)

https://supportportal.juniper.net/JSA112183

Source: sirt@juniper.net

Timeline

No history available yet.