This vulnerability (CWE-401) in Junos OS MX Series occurs due to a missing release of memory after its effective lifetime in the bbe-smgd process. When the authentication packet-type option is enabled, receiving packets that do not match the configured type causes a memory leak. Over time, this leak exhausts available memory for the daemon, resulting in denial of service by preventing new subscriber logins. The problem is observable via system process monitoring and specific log messages indicating heap memory exhaustion. Affected versions include all releases before 22.4R3-S8, 23.2 before 23.2R2-S5, 23.4 before 23.4R2-S6, 24.2 before 24.2R2-S2, 24.4 before 24.4R2, and 25.2 before 25.2R2.

An adjacent, unauthenticated attacker can exploit this vulnerability to cause a denial of service by exhausting memory in the bbe-smgd daemon. This prevents new subscribers from logging in, potentially disrupting network services dependent on Junos OS MX Series devices. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitoring the memory utilization of the bbe-smgd process using 'show system processes extensive | match bbe-smgd' can help detect memory exhaustion. Operators should watch for the log message '%DAEMON-3-SMD_DPROF_RSMON_ERROR: Resource unavailability, Reason: Daemon Heap Memory exhaustion' as an indicator of this issue.