5.9

CVE-2018-0050

Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.

An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D48 on QFX Switching; 14.2 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4. This issue does not affect versions of Junos OS before 14.1R1. Junos OS RSVP only supports IPv4. IPv6 is not affected by this issue. This issue require it to be received on an interface configured to receive this type of traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 14.1
Juniper ≫ Junos Version 14.1 Update r1
Juniper ≫ Junos Version 14.1 Update r2
Juniper ≫ Junos Version 14.1 Update r3
Juniper ≫ Junos Version 14.1 Update r4
Juniper ≫ Junos Version 14.1 Update r5
Juniper ≫ Junos Version 14.1 Update r6
Juniper ≫ Junos Version 14.1 Update r7
Juniper ≫ Junos Version 14.1 Update r9
Juniper ≫ Junos Version 14.1x53
Juniper ≫ Junos Version 14.1x53 Update d10
Juniper ≫ Junos Version 14.1x53 Update d121
Juniper ≫ Junos Version 14.1x53 Update d15
Juniper ≫ Junos Version 14.1x53 Update d16
Juniper ≫ Junos Version 14.1x53 Update d25
Juniper ≫ Junos Version 14.1x53 Update d26
Juniper ≫ Junos Version 14.1x53 Update d27
Juniper ≫ Junos Version 14.1x53 Update d30
Juniper ≫ Junos Version 14.1x53 Update d35
Juniper ≫ Junos Version 14.1x53 Update d40
Juniper ≫ Junos Version 14.1x53 Update d42
Juniper ≫ Junos Version 14.1x53 Update d43
Juniper ≫ Junos Version 14.1x53 Update d44
Juniper ≫ Junos Version 14.1x53 Update d45
Juniper ≫ Junos Version 14.1x53 Update d46
Juniper ≫ Junos Version 14.1x53 Update d47
Juniper ≫ Junos Version 14.1x53
Juniper ≫ Junos Version 14.1x53 Update d10
Juniper ≫ Junos Version 14.1x53 Update d121
Juniper ≫ Junos Version 14.1x53 Update d15
Juniper ≫ Junos Version 14.1x53 Update d16
Juniper ≫ Junos Version 14.1x53 Update d25
Juniper ≫ Junos Version 14.1x53 Update d26
Juniper ≫ Junos Version 14.1x53 Update d27
Juniper ≫ Junos Version 14.1x53 Update d30
Juniper ≫ Junos Version 14.1x53 Update d35
Juniper ≫ Junos Version 14.1x53 Update d40
Juniper ≫ Junos Version 14.1x53 Update d42
Juniper ≫ Junos Version 14.1x53 Update d43
Juniper ≫ Junos Version 14.1x53 Update d44
Juniper ≫ Junos Version 14.1x53 Update d45
Juniper ≫ Junos Version 14.1x53 Update d46
Juniper ≫ Junos Version 14.1x53 Update d47
Juniper ≫ Junos Version 14.1x53 Update d48
Juniper ≫ Junos Version 14.2
Juniper ≫ Junos Version 14.2
Juniper ≫ Junos Version 14.2 Update r1
Juniper ≫ Junos Version 14.2 Update r2
Juniper ≫ Junos Version 14.2 Update r3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.3% 0.811
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Juniper 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/106206
Third Party Advisory
http://www.securitytracker.com/id/1041851
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10884
Vendor Advisory
Mitigation