← Back

CVE-2018-0029

nvd nist
Published: Jul 11, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart (vmcore). This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases prior to Junos OS 15.1 are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S11, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R5-S4, 16.1R6-S1, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D90, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.

Affected (91)

Products: Juniper: Junos
1 product
Junos
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1
Version 15.1 a1
Version 15.1 f1
Version 15.1 f2-s1
Version 15.1 f2-s2
Version 15.1 f2-s3
Version 15.1 f2-s4
Version 15.1 f2
Version 15.1 f3
Version 15.1 f4
Version 15.1 f5
Version 15.1 f6
Version 15.1 r4-s9
Version 15.1 r6-s6
Version 15.1 r7
Configuration B
19 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x49
Version 15.1x49 d100
Version 15.1x49 d10
Version 15.1x49 d110
Version 15.1x49 d120
Version 15.1x49 d130
Version 15.1x49 d20
Version 15.1x49 d30
Version 15.1x49 d35
Version 15.1x49 d40
Version 15.1x49 d45
Version 15.1x49 d50
Version 15.1x49 d55
Version 15.1x49 d60
Version 15.1x49 d65
Version 15.1x49 d70
Version 15.1x49 d75
Version 15.1x49 d80
Version 15.1x49 d90
Configuration C
2 platform
Running on/withPlatform Versions
Juniper
Ex2300
All versions
Juniper
Ex3400
All versions
Configuration D
2 platform
Running on/withPlatform Versions
Juniper
Qfx5110
All versions
Juniper
Qfx5200
All versions
Configuration E
28 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x53
Version 15.1x53 d20
Version 15.1x53 d210
Version 15.1x53 d21
Version 15.1x53 d230
Version 15.1x53 d231
Version 15.1x53 d232
Version 15.1x53 d25
Version 15.1x53 d30
Version 15.1x53 d32
Version 15.1x53 d33
Version 15.1x53 d34
Version 15.1x53 d40
Version 15.1x53 d45
Version 15.1x53 d50
Version 15.1x53 d51
Version 15.1x53 d52
Version 15.1x53 d55
Version 15.1x53 d56
Version 15.1x53 d57
Version 15.1x53 d58
Version 15.1x53 d60
Version 15.1x53 d61
Version 15.1x53 d62
Version 15.1x53 d63
Version 15.1x53 d64
Version 15.1x53 d65
Version 15.1x53 d66
Running on/withPlatform Versions
Juniper
Nfx250
All versions
Configuration F
7 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 16.1
Version 16.1 r1
Version 16.1 r2
Version 16.1 r3
Version 16.1 r5-s4
Version 16.1 r6-s1
Version 16.1 r7
Configuration G
4 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 16.2
Version 16.2 r1
Version 16.2 r2-s5
Version 16.2 r3
Configuration H
5 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 17.1
Version 17.1 r1
Version 17.1 r2-s7
Version 17.1 r2
Version 17.1 r3
Configuration I
2 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 17.2x75
Version 17.2x75 d110
Configuration J
3 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 17.3
Version 17.3 r1
Version 17.3 r2
Configuration K
3 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 17.4
Version 17.4 r1
Version 17.4 r2
Configuration L
5 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 17.2
Version 17.2 r1
Version 17.2 r2-s4
Version 17.2 r2
Version 17.2 r3

References (4)

Source: sirt@juniper.net
Third Party AdvisoryVDB Entry
Source: sirt@juniper.net
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.