This vulnerability is a missing release of memory after its effective lifetime (CWE-401) in the DHCP daemon (jdhcpd) component of Juniper Networks Junos OS on MX Series devices. It specifically impacts DHCPv6 over PPPoE or VLAN with Active or Bulk lease query scenarios. Each subscriber logout causes a small memory leak, which accumulates over time and leads to exhaustion of available memory. When memory is fully consumed, the jdhcpd process crashes and restarts, causing a temporary but complete denial-of-service. The affected Junos OS versions are all versions before 22.4R3-S1, 23.2 versions before 23.2R2, and 23.4 versions before 23.4R2. No official patch or remediation level is indicated in the provided data, and no known exploits in the wild have been reported.

An adjacent, unauthenticated attacker can cause a memory leak by triggering subscriber logouts in affected DHCPv6 scenarios, leading to exhaustion of memory in the jdhcpd process. This results in the DHCP daemon crashing and restarting, causing a complete denial-of-service until the process recovers. There is no impact on confidentiality or integrity, only availability is affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitoring the memory usage of the jdhcpd process using 'show system processes extensive | match jdhcpd' is recommended to detect abnormal memory growth. No vendor advisory or official remediation instructions are provided in the current data.