Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs
An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS session-resumption attempt a specifically malformed TLS message is received. This results in an invalid pointer access and PFE crash which causes a temporary loss of traffic forwarding until the PFE automatically recovers. The exact internal timing to trigger this issue is outside the attacker's direct control.This issue affects Junos OS on SRX Series: * All versions before 23.2R2-S5; * 23.4 versions before 23.4R2-S5; * 24.2 versions before 24.2R2-S2; * 24.4 versions before 24.4R2.
CVE-2026-102082
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-102082
Junos OS
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Juniper Networks",
"product": "Junos OS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "23.2R2-S5",
"versionType": "custom"
},
{
"status": "affected",
"version": "23.4",
"lessThan": "23.4R2-S5",
"versionType": "custom"
},
{
"status": "affected",
"version": "24.2",
"lessThan": "24.2R2-S2",
"versionType": "custom"
},
{
"status": "affected",
"version": "24.4",
"lessThan": "24.4R2",
"versionType": "custom"
}
],
"platforms": [
"SRX Series"
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-102082
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #23188 · Revision 1
- Added to Heist Feed
- Publisher date