Juniper Networks Junos OS MX Series BroadBand Edge Subscriber Management Daemon Denial-of-Service Vulnerability

A memory leak vulnerability has been identified in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series. This vulnerability allows an adjacent, unauthenticated attacker to cause a denial-of-service condition. The issue arises when the authentication packet-type option is configured, and a received packet does not match the expected type, leading to a memory leak. Once the daemon's memory is exhausted, new subscribers cannot log in. This vulnerability affects all versions of Junos OS on MX Series prior to 22.4R3-S8, as well as specific versions in the 23.x and 24.x series.

Impact

Exploitation of this vulnerability leads to exhaustion of the bbe-smgd daemon's heap memory, causing a denial-of-service condition where no new subscribers can log in.

Remediation

Users can upgrade to Junos OS versions 22.4R3-S8, 23.2R2-S5, 23.4R2-S6, 24.2R2-S2, 24.4R2, 25.2R2, or 25.4R1. For guidance on which releases vulnerabilities are fixed, refer to Juniper's KB16765.