Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification
Impact
A malformed HTTP URI can cause a service crash in Juniper Networks Session Smart Router and Session Smart Conductor versions less than 7.0.5, 7.1.7, and 7.2.3 due to an Out-of-Bounds Read vulnerability. The attacker must send a specially crafted HTTP request. The impact is a denial of service.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.What to do
The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:
- 7.0.5
and all subsequent releases;
- 7.1.7
and all subsequent releases;
- 7.2.3 and all subsequent releases.
There are no known workarounds for this issue.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Juniper Networks · juniper
Session Smart Router
3 ranges
Juniper Networks · juniper
Session Smart Router
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before 7.0.5
custom versions
7.1.0 → before 7.1.7
custom versions
7.2.0 → before 7.2.3
custom versions
Other versions: unaffected
Juniper Networks · juniper
Session Smart Conductor
3 ranges
Juniper Networks · juniper
Session Smart Conductor
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before 7.0.5
custom versions
7.1.0 → before 7.1.7
custom versions
7.2.0 → before 7.2.3
custom versions
Other versions: unaffected
Original source description
An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-103390View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.