Memory Leak Vulnerability in Juniper Networks Junos OS on MX Series

CVE-2026-33782

What is CVE-2026-33782?

A vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to exploit a memory leak condition. This issue occurs during DHCPv6 over PPPoE or VLAN when subscribers log out, resulting in a gradual accumulation of leaked memory. Ultimately, this leads to exhaustion of available memory, causing the jdhcpd process to crash and restart, resulting in a Denial-of-Service that impacts service availability until recovery is achieved. Monitoring of the memory usage can be performed with the command: 'show system processes extensive | match jdhcpd'.

References