CVE-2018-0005

EPSS 0.72%
Veröffentlicht 10.01.2018 22:29:01
Zuletzt bearbeitet 21.11.2024 03:37:20
Erkennungen
Login

Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 5

NVD 24 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 14.1x53

   Juniper ≫ Ex Rps Version -
   Juniper ≫ Ex2200 Version -
   Juniper ≫ Ex2200-c Version -
   Juniper ≫ Ex2300 Version -
   Juniper ≫ Ex2300-c Version -
   Juniper ≫ Ex3300 Version -
   Juniper ≫ Ex3400 Version -
   Juniper ≫ Ex4200 Version -
   Juniper ≫ Ex4300 Version -
   Juniper ≫ Ex4550 Version -
   Juniper ≫ Ex4600 Version -
   Juniper ≫ Ex9200 Version -
   Juniper ≫ Qfx10002 Version -
   Juniper ≫ Qfx10008 Version -
   Juniper ≫ Qfx10016 Version -
   Juniper ≫ Qfx5100 Version -
   Juniper ≫ Qfx5110 Version -
   Juniper ≫ Qfx5200 Version -

Juniper ≫ Junos Version 14.1x53 Update d10

Juniper ≫ Junos Version 14.1x53 Update d15

Juniper ≫ Junos Version 14.1x53 Update d16

Juniper ≫ Junos Version 14.1x53 Update d25

Juniper ≫ Junos Version 14.1x53 Update d26

Juniper ≫ Junos Version 14.1x53 Update d27

Juniper ≫ Junos Version 14.1x53 Update d30

Juniper ≫ Junos Version 14.1x53 Update d35

Juniper ≫ Junos Version 15.1 Update r1

Juniper ≫ Junos Version 15.1 Update r2

Juniper ≫ Junos Version 15.1 Update r3

Juniper ≫ Junos Version 15.1 Update r4

Juniper ≫ Junos Version 15.1 Update r5

Juniper ≫ Junos Version 15.1 Update r6

Juniper ≫ Junos Version 15.1x53 Update d20

Juniper ≫ Junos Version 15.1x53 Update d21

Juniper ≫ Junos Version 15.1x53 Update d30

Juniper ≫ Junos Version 15.1x53 Update d32

Juniper ≫ Junos Version 15.1x53 Update d33

Juniper ≫ Junos Version 15.1x53 Update d34

Juniper ≫ Junos Version 15.1x53 Update d50

Juniper ≫ Junos Version 15.1x53 Update d51

Juniper ≫ Junos Version 15.1x53 Update d52

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.72%	0.49

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	5.8	6.5	6.4	AV:A/AC:L/Au:N/C:P/I:P/A:P
Juniper	7.4	2.8	4	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

http://www.securitytracker.com/id/1040182

Third Party Advisory

VDB Entry

https://kb.juniper.net/JSA10833

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2018-0005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0005

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-0005