Memory Leak Vulnerability in Juniper Networks Junos OS and Evolved Products

CVE-2026-33780

What is CVE-2026-33780?

A vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks' Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to exploit a flaw in memory management. Due to a logic error, memory allocated for routes from remote multi-homed Provider Edge devices is not released properly when churn occurs. This leads to memory leaks within the l2ald process, ultimately causing it to crash and requiring a restart. Continuous monitoring of l2ald's memory consumption is necessary to prevent potential service disruptions.

References