7.5

CVE-2018-0030

Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) installed and PTX1K: 15.1F versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D46; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D70, 17.2X75-D90; 17.3 versions prior to 17.3R1-S4, 17.3R2, 17.4 versions prior to 17.4R1-S2, 17.4R2. Refer to KB25385 for more information about PFE line cards.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 15.1 Update f
Juniper ≫ Junos Version 15.1 Update f2
Juniper ≫ Junos Version 15.1 Update f3
Juniper ≫ Junos Version 15.1 Update f4
Juniper ≫ Junos Version 15.1 Update f5
Juniper ≫ Junos Version 15.1 Update f6
Juniper ≫ Junos Version 15.1
Juniper ≫ Junos Version 15.1 Update f4
Juniper ≫ Junos Version 15.1 Update r1
Juniper ≫ Junos Version 15.1 Update r2
Juniper ≫ Junos Version 15.1 Update r6-s6
Juniper ≫ Junos Version 15.1 Update r7
Juniper ≫ Junos Version 16.1
Juniper ≫ Junos Version 16.1 Update r1
Juniper ≫ Junos Version 16.1 Update r2
Juniper ≫ Junos Version 16.1 Update r3
Juniper ≫ Junos Version 16.1 Update r4-s9
Juniper ≫ Junos Version 16.1 Update r5-s4
Juniper ≫ Junos Version 16.1 Update r6-s3
Juniper ≫ Junos Version 16.1 Update r7
Juniper ≫ Junos Version 16.1x65
Juniper ≫ Junos Version 16.1x65 Update d30
Juniper ≫ Junos Version 16.1x65 Update d35
Juniper ≫ Junos Version 16.1x65 Update d40
Juniper ≫ Junos Version 16.2
Juniper ≫ Junos Version 16.2 Update r1
Juniper ≫ Junos Version 16.2 Update r2-s5
Juniper ≫ Junos Version 16.2 Update r3
Juniper ≫ Junos Version 17.1
Juniper ≫ Junos Version 17.1 Update r1
Juniper ≫ Junos Version 17.1 Update r2-s7
Juniper ≫ Junos Version 17.1 Update r3
Juniper ≫ Junos Version 17.2
Juniper ≫ Junos Version 17.2 Update r1
Juniper ≫ Junos Version 17.2 Update r2-s4
Juniper ≫ Junos Version 17.2 Update r3
Juniper ≫ Junos Version 17.3
Juniper ≫ Junos Version 17.3 Update r1
Juniper ≫ Junos Version 17.3 Update r2
Juniper ≫ Junos Version 17.4
Juniper ≫ Junos Version 17.4 Update r1
Juniper ≫ Junos Version 17.4 Update r2
Juniper ≫ Junos Version 17.2x75
Juniper ≫ Junos Version 17.2x75 Update d90
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.43% 0.821
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Juniper 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://www.securitytracker.com/id/1041325
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10864
Vendor Advisory
https://kb.juniper.net/KB25385
Vendor Advisory