Juniper Networks Junos OS and Junos OS Evolved DHCP Daemon Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Juniper DHCP Daemon (jdhcpd) of Junos OS and Junos OS Evolved. This vulnerability allows an unauthenticated, adjacent attacker to cause the jdhcpd process to crash by sending a specifically malformed DHCP packet from a DHCP client. The crash leads to a temporary unavailability of the DHCP service, causing a sustained denial-of-service condition. Although the DHCP process automatically restarts to recover the service, this issue can be disruptive. The vulnerability occurs when dhcp-security is enabled.

Impact

Exploitation of this vulnerability causes the jdhcpd process to crash, leading to a temporary disruption of the DHCP service. While the service automatically restarts, the interruption can cause sustained availability issues.