HIGH🇵🇱 Wersja polska

CVE-2026-33782

CVSS 8.7v4.0pub. 2026-04-09upd. 2026-04-17

A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attacker to cause a memory leak, that will eventually cause a complete Denial-of-Service (DoS). In a DHCPv6 over PPPoE, or DHCPv6 over VLAN with Active lease query or Bulk lease query scenario, every subscriber logout will leak a small amount of memory. When all available memory has been exhausted, jdhcpd will crash and restart which causes a complete service impact until the process has recovered. The memory usage of jdhcpd can be monitored with: user@host> show system processes extensive | match jdhcpd This issue affects Junos OS: * all versions before 22.4R3-S1, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R2.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X

  • Juniper Junos

    OS
    Juniper
    22.423.223.4< 22.4

  • Juniper Mx10004

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx10008

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx2008

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx2010

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx2020

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx204

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx240

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx301

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx304

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx480

    HW
    Juniper
    wszystkie wersje

  • Juniper Mx960

    HW
    Juniper
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-36845CRITICAL9.8⚠ KEVten sam produkt

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SR...

CVE-2024-21591CRITICAL9.8PL ✓ten sam produkt

Out-of-bounds Write w J-Web Juniper Junos OS — RCE z uprawnieniami root

CVE-2021-0248CRITICAL10.0ten sam produkt

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials ...

CVE-2021-0254CRITICAL9.8ten sam produkt

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unaut...

CVE-2021-0211CRITICAL10.0ten sam produkt

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Rout...