CVE-2026-33782: CWE-401 Missing Release of Memory after Effective Lifetime in Juniper Networks Junos OS
A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attacker to cause a memory leak, that will eventually cause a complete Denial-of-Service (DoS). In a DHCPv6 over PPPoE, or DHCPv6 over VLAN with Active lease query or Bulk lease query scenario, every subscriber logout will leak a small amount of memory. When all available memory has been exhausted, jdhcpd will crash and restart which causes a complete service impact until the process has recovered. The memory usage of jdhcpd can be monitored with: user@host> show system processes extensive | match jdhcpd This issue affects Junos OS: * all versions before 22.4R3-S1, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R2.
AI Analysis
Technical Summary
This vulnerability is a missing release of memory after its effective lifetime (CWE-401) in the DHCP daemon (jdhcpd) of Junos OS on MX Series devices. Specifically, in DHCPv6 over PPPoE or VLAN with Active or Bulk lease query scenarios, subscriber logouts leak small amounts of memory. Over time, this memory leak exhausts available memory, causing the jdhcpd process to crash and restart, leading to a denial-of-service condition. The affected Junos OS versions are all versions before 22.4R3-S1, 23.2 versions before 23.2R2, and 23.4 versions before 23.4R2. The vulnerability is exploitable by an adjacent unauthenticated attacker. The CVSS vector indicates low attack complexity, no privileges required, no user interaction, and impact limited to availability.
Potential Impact
An adjacent unauthenticated attacker can cause a memory leak in the DHCP daemon by triggering subscriber logouts in specific DHCPv6 scenarios. This leak accumulates until the DHCP daemon crashes and restarts, causing a complete denial-of-service on the affected Junos OS device until recovery. There is no impact on confidentiality or integrity reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is provided in the available data. Monitoring the memory usage of the jdhcpd process may help detect the issue, but no direct mitigation steps are specified.
CVE-2026-33782: CWE-401 Missing Release of Memory after Effective Lifetime in Juniper Networks Junos OS
Description
A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attacker to cause a memory leak, that will eventually cause a complete Denial-of-Service (DoS). In a DHCPv6 over PPPoE, or DHCPv6 over VLAN with Active lease query or Bulk lease query scenario, every subscriber logout will leak a small amount of memory. When all available memory has been exhausted, jdhcpd will crash and restart which causes a complete service impact until the process has recovered. The memory usage of jdhcpd can be monitored with: user@host> show system processes extensive | match jdhcpd This issue affects Junos OS: * all versions before 22.4R3-S1, * 23.2 versions before 23.2R2, * 23.4 versions before 23.4R2.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability is a missing release of memory after its effective lifetime (CWE-401) in the DHCP daemon (jdhcpd) of Junos OS on MX Series devices. Specifically, in DHCPv6 over PPPoE or VLAN with Active or Bulk lease query scenarios, subscriber logouts leak small amounts of memory. Over time, this memory leak exhausts available memory, causing the jdhcpd process to crash and restart, leading to a denial-of-service condition. The affected Junos OS versions are all versions before 22.4R3-S1, 23.2 versions before 23.2R2, and 23.4 versions before 23.4R2. The vulnerability is exploitable by an adjacent unauthenticated attacker. The CVSS vector indicates low attack complexity, no privileges required, no user interaction, and impact limited to availability.
Potential Impact
An adjacent unauthenticated attacker can cause a memory leak in the DHCP daemon by triggering subscriber logouts in specific DHCPv6 scenarios. This leak accumulates until the DHCP daemon crashes and restarts, causing a complete denial-of-service on the affected Junos OS device until recovery. There is no impact on confidentiality or integrity reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is provided in the available data. Monitoring the memory usage of the jdhcpd process may help detect the issue, but no direct mitigation steps are specified.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- juniper
- Date Reserved
- 2026-03-23T19:46:13.669Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d843751cc7ad14da3fb550
Added to database: 4/10/2026, 12:25:25 AM
Last enriched: 4/17/2026, 11:58:44 AM
Last updated: 5/25/2026, 12:20:51 PM
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.