The vulnerability is a stack-based buffer overflow in the jdhcpd daemon of Juniper Networks’ Junos OS and Junos OS Evolved. A malformed DHCPv4 server reply sent while the DHCPv4 local‑client feature is active overflows a stack buffer. An attacker exploiting this flaw can either crash jdhcpd, resulting in a denial of service, or, in the worst case, execute arbitrary code with root privileges on the device, thereby compromising confidentiality, integrity, and availability.

Juniper Networks’ Junos OS and Junos OS Evolved are affected. Versions prior to the patched releases listed in the advisory are vulnerable, including any Junos OS 23.2, 23.4, or 24.2 before the specified respins and any Junos OS Evolved 23.2‑EVO, 23.4‑EVO, or 24.2‑EVO before the specified respins. All builds after the listed releases are considered fixed.

The CVSS score of 8.7 indicates high severity. The EPSS score is < 1%, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is network‑based: an attacker on an adjacent local network must be able to transmit DHCP packets to the target. No official workaround exists; therefore the most effective mitigation is to upgrade to a patched release. In the absence of an immediate patch, it is advisable to limit exposure of DHCP traffic to trusted sources to reduce the risk of exploitation.