← Back

CVE-2018-0050

nvd nist
Published: Oct 10, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D48 on QFX Switching; 14.2 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4. This issue does not affect versions of Junos OS before 14.1R1. Junos OS RSVP only supports IPv4. IPv6 is not affected by this issue. This issue require it to be received on an interface configured to receive this type of traffic.

Affected (31)

Products: Juniper: Junos
1 product
Junos
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 14.1
Version 14.1 r1
Version 14.1 r2
Version 14.1 r3
Version 14.1 r4
Version 14.1 r5
Version 14.1 r6
Version 14.1 r7
Version 14.1 r9
Configuration C
18 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 14.1x53
Version 14.1x53 d10
Version 14.1x53 d121
Version 14.1x53 d15
Version 14.1x53 d16
Version 14.1x53 d25
Version 14.1x53 d26
Version 14.1x53 d27
Version 14.1x53 d30
Version 14.1x53 d35
Version 14.1x53 d40
Version 14.1x53 d42
Version 14.1x53 d43
Version 14.1x53 d44
Version 14.1x53 d45
Version 14.1x53 d46
Version 14.1x53 d47
Version 14.1x53 d48
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 14.2
Version 14.2 r1
Version 14.2 r2
Version 14.2 r3

References (6)

Source: sirt@juniper.net
Third Party Advisory
Source: sirt@juniper.net
Third Party AdvisoryVDB Entry
Source: sirt@juniper.net
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.