5.3

CVE-2018-0055

Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message

Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge (BBE) environment may result in a jdhcpd daemon crash. The daemon automatically restarts without intervention, but a continuous receipt of crafted DHCPv6 packets could leaded to an extended denial of service condition. This issue only affects Junos OS 15.1 and later. Earlier releases are unaffected by this issue. Devices are only vulnerable to the specially crafted DHCPv6 message if DHCP services are configured. Devices not configured to act as a DHCP server are not vulnerable to this issue. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S2; 15.1X49 versions prior to 15.1X49-D160; 15.1X53 versions prior to 15.1X53-D235, 15.1X53-D495; 16.1 versions prior to 16.1R4-S11, 16.1R6-S6, 16.1R7-S2; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S9; 17.2 versions prior to 17.2R2-S6; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R1-S5; 18.1 versions prior to 18.1R2-S3; 18.2 versions prior to 18.2R1-S2; 18.2X75 versions prior to 18.2X75-D20.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 15.1
Juniper ≫ Junos Version 15.1 Update f2
Juniper ≫ Junos Version 15.1 Update f3
Juniper ≫ Junos Version 15.1 Update f4
Juniper ≫ Junos Version 15.1 Update f5
Juniper ≫ Junos Version 15.1 Update f6
Juniper ≫ Junos Version 15.1 Update f7
Juniper ≫ Junos Version 15.1 Update r1
Juniper ≫ Junos Version 15.1 Update r2
Juniper ≫ Junos Version 15.1 Update r3
Juniper ≫ Junos Version 15.1 Update r6
Juniper ≫ Junos Version 15.1x49
Juniper ≫ Junos Version 15.1x49 Update d10
Juniper ≫ Junos Version 15.1x49 Update d100
Juniper ≫ Junos Version 15.1x49 Update d110
Juniper ≫ Junos Version 15.1x49 Update d120
Juniper ≫ Junos Version 15.1x49 Update d140
Juniper ≫ Junos Version 15.1x49 Update d20
Juniper ≫ Junos Version 15.1x49 Update d30
Juniper ≫ Junos Version 15.1x49 Update d35
Juniper ≫ Junos Version 15.1x49 Update d40
Juniper ≫ Junos Version 15.1x49 Update d45
Juniper ≫ Junos Version 15.1x49 Update d50
Juniper ≫ Junos Version 15.1x49 Update d55
Juniper ≫ Junos Version 15.1x49 Update d60
Juniper ≫ Junos Version 15.1x49 Update d65
Juniper ≫ Junos Version 15.1x49 Update d70
Juniper ≫ Junos Version 15.1x49 Update d75
Juniper ≫ Junos Version 15.1x49 Update d80
Juniper ≫ Junos Version 15.1x49 Update d90
Juniper ≫ Junos Version 15.1x53
Juniper ≫ Junos Version 15.1x53 Update d10
Juniper ≫ Junos Version 15.1x53 Update d20
Juniper ≫ Junos Version 15.1x53 Update d21
Juniper ≫ Junos Version 15.1x53 Update d210
Juniper ≫ Junos Version 15.1x53 Update d230
Juniper ≫ Junos Version 15.1x53 Update d231
Juniper ≫ Junos Version 15.1x53 Update d232
Juniper ≫ Junos Version 15.1x53 Update d233
Juniper ≫ Junos Version 15.1x53 Update d30
Juniper ≫ Junos Version 15.1x53 Update d32
Juniper ≫ Junos Version 15.1x53 Update d33
Juniper ≫ Junos Version 15.1x53 Update d34
Juniper ≫ Junos Version 15.1x53 Update d40
Juniper ≫ Junos Version 15.1x53 Update d45
Juniper ≫ Junos Version 15.1x53 Update d50
Juniper ≫ Junos Version 15.1x53 Update d51
Juniper ≫ Junos Version 15.1x53 Update d52
Juniper ≫ Junos Version 15.1x53 Update d55
Juniper ≫ Junos Version 15.1x53 Update d57
Juniper ≫ Junos Version 15.1x53 Update d58
Juniper ≫ Junos Version 15.1x53 Update d59
Juniper ≫ Junos Version 15.1x53 Update d60
Juniper ≫ Junos Version 15.1x53 Update d62
Juniper ≫ Junos Version 15.1x53 Update d63
Juniper ≫ Junos Version 15.1x53 Update d64
Juniper ≫ Junos Version 15.1x53 Update d65
Juniper ≫ Junos Version 15.1x53 Update d66
Juniper ≫ Junos Version 15.1x53 Update d67
Juniper ≫ Junos Version 16.1
Juniper ≫ Junos Version 16.1 Update r1
Juniper ≫ Junos Version 16.1 Update r2
Juniper ≫ Junos Version 16.1 Update r3
Juniper ≫ Junos Version 16.2
Juniper ≫ Junos Version 16.2 Update r1
Juniper ≫ Junos Version 17.1
Juniper ≫ Junos Version 17.1 Update r1
Juniper ≫ Junos Version 17.2
Juniper ≫ Junos Version 17.2 Update r1
Juniper ≫ Junos Version 17.3
Juniper ≫ Junos Version 17.3 Update r1
Juniper ≫ Junos Version 17.3 Update r2
Juniper ≫ Junos Version 17.4
Juniper ≫ Junos Version 18.2x75
Juniper ≫ Junos Version 18.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.44
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 1.6 3.6
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 2.9 5.5 2.9
AV:A/AC:M/Au:N/C:N/I:N/A:P
Juniper 6.5 2.8 3.6
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1041856
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10889
Vendor Advisory