This vulnerability (CWE-401) in Junos OS MX Series arises from a missing release of memory after its effective lifetime in the bbe-smgd process. When the authentication packet-type option is enabled, packets that do not match the configured type cause memory to leak. Over time, this leak exhausts available memory for the daemon, preventing new subscriber logins and resulting in a denial of service. The problem is observable via system process monitoring and specific daemon log messages indicating heap memory exhaustion. Affected versions include all Junos OS releases before 22.4R3-S8, 23.2 before 23.2R2-S5, 23.4 before 23.4R2-S6, 24.2 before 24.2R2-S2, 24.4 before 24.4R2, and 25.2 before 25.2R2.

An unauthenticated adjacent attacker can cause a denial of service by triggering a memory leak in the bbe-smgd daemon, leading to exhaustion of daemon heap memory. This prevents new subscribers from logging in, impacting service availability. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitoring the bbe-smgd memory usage with 'show system processes extensive | match bbe-smgd' and observing daemon logs for memory exhaustion messages can help detect exploitation attempts. Consider disabling or carefully configuring the authentication packet-type option if feasible to reduce exposure.