CVE-2018-0002

EPSS 1.54%
Veröffentlicht 10.01.2018 22:29:00
Zuletzt bearbeitet 21.11.2024 03:37:19
Erkennungen
Login

MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in an extended Denial of Service condition. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D60 on SRX series; 12.3X48 versions prior to 12.3X48-D35 on SRX series; 14.1 versions prior to 14.1R9 on MX series; 14.2 versions prior to 14.2R8 on MX series; 15.1X49 versions prior to 15.1X49-D60 on SRX series; 15.1 versions prior to 15.1R5-S8, 15.1F6-S9, 15.1R6-S4, 15.1R7 on MX series; 16.1 versions prior to 16.1R6 on MX series; 16.2 versions prior to 16.2R3 on MX series; 17.1 versions prior to 17.1R2-S4, 17.1R3 on MX series. No other Juniper Networks products or platforms are affected by this issue.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 5

NVD 56 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 12.1x46 Update d10

   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 12.1x46 Update d15

Juniper ≫ Junos Version 12.1x46 Update d20

Juniper ≫ Junos Version 12.1x46 Update d25

Juniper ≫ Junos Version 12.1x46 Update d30

Juniper ≫ Junos Version 12.1x46 Update d35

Juniper ≫ Junos Version 12.1x46 Update d40

Juniper ≫ Junos Version 12.1x46 Update d45

Juniper ≫ Junos Version 12.1x46 Update d50

Juniper ≫ Junos Version 12.1x46 Update d55

Juniper ≫ Junos Version 12.3x48 Update d10

Juniper ≫ Junos Version 12.3x48 Update d15

Juniper ≫ Junos Version 12.3x48 Update d20

Juniper ≫ Junos Version 12.3x48 Update d25

Juniper ≫ Junos Version 12.3x48 Update d30

Juniper ≫ Junos Version 14.1 Update r1

   Juniper ≫ Mx10 Version -
   Juniper ≫ Mx104 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx2020 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx40 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx5 Version -
   Juniper ≫ Mx80 Version -
   Juniper ≫ Mx960 Version -

Juniper ≫ Junos Version 14.1 Update r2

Juniper ≫ Junos Version 14.1 Update r3

Juniper ≫ Junos Version 14.1 Update r4

Juniper ≫ Junos Version 14.1 Update r5

Juniper ≫ Junos Version 14.1 Update r6

Juniper ≫ Junos Version 14.1 Update r7

Juniper ≫ Junos Version 14.1 Update r8

Juniper ≫ Junos Version 14.2 Update r1

Juniper ≫ Junos Version 14.2 Update r2

Juniper ≫ Junos Version 14.2 Update r3

Juniper ≫ Junos Version 14.2 Update r4

Juniper ≫ Junos Version 14.2 Update r5

Juniper ≫ Junos Version 14.2 Update r6

Juniper ≫ Junos Version 14.2 Update r7

Juniper ≫ Junos Version 15.1x49 Update d10

Juniper ≫ Junos Version 15.1x49 Update d15

Juniper ≫ Junos Version 15.1x49 Update d20

Juniper ≫ Junos Version 15.1x49 Update d25

Juniper ≫ Junos Version 15.1x49 Update d30

Juniper ≫ Junos Version 15.1x49 Update d35

Juniper ≫ Junos Version 15.1x49 Update d40

Juniper ≫ Junos Version 15.1x49 Update d45

Juniper ≫ Junos Version 15.1x49 Update d50

Juniper ≫ Junos Version 15.1x49 Update d55

Juniper ≫ Junos Version 15.1 Update f6-s9

Juniper ≫ Junos Version 15.1 Update r1

Juniper ≫ Junos Version 15.1 Update r2

Juniper ≫ Junos Version 15.1 Update r3

Juniper ≫ Junos Version 15.1 Update r4

Juniper ≫ Junos Version 15.1 Update r6-s4

Juniper ≫ Junos Version 15.1 Update r7

Juniper ≫ Junos Version 16.1 Update r1

Juniper ≫ Junos Version 16.1 Update r2

Juniper ≫ Junos Version 16.1 Update r3

Juniper ≫ Junos Version 16.1 Update r4

Juniper ≫ Junos Version 16.1 Update r5

Juniper ≫ Junos Version 16.2 Update r1

Juniper ≫ Junos Version 16.2 Update r2

Juniper ≫ Junos Version 17.1 Update r1

Juniper ≫ Junos Version 17.1 Update r3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.54%	0.717

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.9	2.2	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
Juniper	8.2	3.9	4.2	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securitytracker.com/id/1040178

Third Party Advisory

VDB Entry

https://kb.juniper.net/JSA10829

Patch

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2018-0002

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0002

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0002

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-0002