CVE-2018-0005

EPSS 0.22%
Published 10.01.2018 22:29:01
Last modified 21.11.2024 03:37:20
Source sirt@juniper.net
Teams watchlist Login
Open Login

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.

Affected products Warnungen 0 Metrics 4 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version14.1x53

   Juniper ≫ Ex Rps Version-
   Juniper ≫ Ex2200 Version-
   Juniper ≫ Ex2200-c Version-
   Juniper ≫ Ex2300 Version-
   Juniper ≫ Ex2300-c Version-
   Juniper ≫ Ex3300 Version-
   Juniper ≫ Ex3400 Version-
   Juniper ≫ Ex4200 Version-
   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4550 Version-
   Juniper ≫ Ex4600 Version-
   Juniper ≫ Ex9200 Version-
   Juniper ≫ Qfx10002 Version-
   Juniper ≫ Qfx10008 Version-
   Juniper ≫ Qfx10016 Version-
   Juniper ≫ Qfx5100 Version-
   Juniper ≫ Qfx5110 Version-
   Juniper ≫ Qfx5200 Version-

Juniper ≫ Junos Version14.1x53 Updated10

Juniper ≫ Junos Version14.1x53 Updated15

Juniper ≫ Junos Version14.1x53 Updated16

Juniper ≫ Junos Version14.1x53 Updated25

Juniper ≫ Junos Version14.1x53 Updated26

Juniper ≫ Junos Version14.1x53 Updated27

Juniper ≫ Junos Version14.1x53 Updated30

Juniper ≫ Junos Version14.1x53 Updated35

Juniper ≫ Junos Version15.1 Updater1

Juniper ≫ Junos Version15.1 Updater2

Juniper ≫ Junos Version15.1 Updater3

Juniper ≫ Junos Version15.1 Updater4

Juniper ≫ Junos Version15.1 Updater5

Juniper ≫ Junos Version15.1 Updater6

Juniper ≫ Junos Version15.1x53 Updated20

Juniper ≫ Junos Version15.1x53 Updated21

Juniper ≫ Junos Version15.1x53 Updated30

Juniper ≫ Junos Version15.1x53 Updated32

Juniper ≫ Junos Version15.1x53 Updated33

Juniper ≫ Junos Version15.1x53 Updated34

Juniper ≫ Junos Version15.1x53 Updated50

Juniper ≫ Junos Version15.1x53 Updated51

Juniper ≫ Junos Version15.1x53 Updated52

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.22%	0.451

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5.8	6.5	6.4	AV:A/AC:L/Au:N/C:P/I:P/A:P
sirt@juniper.net	7.4	2.8	4	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

http://www.securitytracker.com/id/1040182

Third Party Advisory

VDB Entry

https://kb.juniper.net/JSA10833

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2018-0005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0005

EUVD