VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 15, 2026· Updated Jun 17, 2026

CVE-2026-21914

CVE-2026-21914

Description

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos).

If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol (GTP) Modify Bearer Request message, a lock is acquired and never released. This results in other threads not being able to acquire a lock themselves, causing a watchdog timeout leading to FPC crash and restart. This issue leads to a complete traffic outage until the device has automatically recovered.

This issue affects Junos OS on SRX Series:

  • all versions before 22.4R3-S8,
  • 23.2 versions before 23.2R2-S5,
  • 23.4 versions before 23.4R2-S6,
  • 24.2 versions before 24.2R2-S3,
  • 24.4 versions before 24.4R2-S2,
  • 25.2 versions before 25.2R1-S1, 25.2R2.

Affected products

53
  • Juniper Networks/Junos52 versions
    cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*+ 51 more
    • cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*range: <22.4
    • cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s6:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3-s7:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2-s4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s4:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2-s5:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r1-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r2-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.2:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.4:r1-s3:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.4:r2-s1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:25.2:-:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:25.2:r1:*:*:*:*:*:*
    • cpe:2.3:o:juniper:junos:25.2:r2:*:*:*:*:*:*
    • (no CPE)range: 0
  • Juniper Networks/Junos OS on SRX Seriesllm-fuzzy
    Range: <22.4R3-S8, <23.2R2-S5, <23.4R2-S6, <24.2R2-S3, <24.4R2-S2, <25.2R1-S1, <25.2R2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.