Lucene search
JuniperCVE-2018-0043HistoryOct 10, 2018 - 6:29 p.m.
CVE-2018-0043
2018-10-1018:29:00
CWE-20
juniper
web.nvd.nist.gov
33
cve-2018-0043
mpls
packet
rpd
crash
denial of service
juniper networks
junos os
vulnerability
security
CVSS2
5.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.009
Percentile
82.5%
Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuously sending specific MPLS packets, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. This issue affects both IPv4 and IPv6. This issue can only be exploited from within the MPLS domain. End-users connected to the CE device cannot cause this crash. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D75 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on QFX/EX Series; 14.1X53 versions prior to 14.1X53-D130 on QFabric Series; 15.1F6 versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9 15.1R7; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D471 15.1X53-D490 on NFX Series; 16.1 versions prior to 16.1R3-S8 16.1R4-S8 16.1R5-S4 16.1R6-S4 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R1-S6 16.2R3; 17.1 versions prior to 17.1R1-S7 17.1R2-S6 17.1R3; 17.2 versions prior to 17.2R1-S6 17.2R2-S3 17.2R3; 17.2X75 versions prior to 17.2X75-D100 17.2X75-D42 17.2X75-D91; 17.3 versions prior to 17.3R1-S4 17.3R2-S2 17.3R3; 17.4 versions prior to 17.4R1-S3 17.4R2 . No other Juniper Networks products or platforms are affected by this issue.
Affected configurations
Node
juniperjunosMatch12.1x46
ORjuniperjunosMatch12.1x46d10
ORjuniperjunosMatch12.1x46d15
ORjuniperjunosMatch12.1x46d20
ORjuniperjunosMatch12.1x46d25
ORjuniperjunosMatch12.1x46d30
ORjuniperjunosMatch12.1x46d35
ORjuniperjunosMatch12.1x46d40
ORjuniperjunosMatch12.1x46d45
ORjuniperjunosMatch12.1x46d50
ORjuniperjunosMatch12.1x46d55
junipersrx1500Match-
ORjunipersrx300Match-
ORjunipersrx320Match-
ORjunipersrx340Match-
ORjunipersrx345Match-
ORjunipersrx4100Match-
ORjunipersrx4200Match-
ORjunipersrx5400Match-
ORjunipersrx550_hmMatch-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
Node
juniperjunosMatch12.3
ORjuniperjunosMatch12.3r1
ORjuniperjunosMatch12.3r10
ORjuniperjunosMatch12.3r11
ORjuniperjunosMatch12.3r2
ORjuniperjunosMatch12.3r3
ORjuniperjunosMatch12.3r4
ORjuniperjunosMatch12.3r5
ORjuniperjunosMatch12.3r6
ORjuniperjunosMatch12.3r7
ORjuniperjunosMatch12.3r8
ORjuniperjunosMatch12.3r9
Node
juniperjunosMatch12.3x48
ORjuniperjunosMatch12.3x48d10
ORjuniperjunosMatch12.3x48d15
ORjuniperjunosMatch12.3x48d20
ORjuniperjunosMatch12.3x48d25
ORjuniperjunosMatch12.3x48d30
ORjuniperjunosMatch12.3x48d35
ORjuniperjunosMatch12.3x48d40
ORjuniperjunosMatch12.3x48d45
ORjuniperjunosMatch12.3x48d50
ORjuniperjunosMatch12.3x48d55
ORjuniperjunosMatch12.3x48d60
ORjuniperjunosMatch12.3x48d65
ORjuniperjunosMatch12.3x48d70
junipersrx1500Match-
ORjunipersrx300Match-
ORjunipersrx320Match-
ORjunipersrx340Match-
ORjunipersrx345Match-
ORjunipersrx4100Match-
ORjunipersrx4200Match-
ORjunipersrx5400Match-
ORjunipersrx550_hmMatch-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
Node
juniperjunosMatch14.1x53
ORjuniperjunosMatch14.1x53d10
ORjuniperjunosMatch14.1x53d121
ORjuniperjunosMatch14.1x53d15
ORjuniperjunosMatch14.1x53d16
ORjuniperjunosMatch14.1x53d25
ORjuniperjunosMatch14.1x53d26
ORjuniperjunosMatch14.1x53d27
ORjuniperjunosMatch14.1x53d30
ORjuniperjunosMatch14.1x53d35
ORjuniperjunosMatch14.1x53d40
ORjuniperjunosMatch14.1x53d42
ORjuniperjunosMatch14.1x53d43
ORjuniperjunosMatch14.1x53d44
ORjuniperjunosMatch14.1x53d45
ORjuniperjunosMatch14.1x53d46
juniperex2200Match-
ORjuniperex2200-cMatch-
ORjuniperex2300Match-
ORjuniperex2300-cMatch-
ORjuniperex3200Match-
ORjuniperex3300Match-
ORjuniperex3400Match-
ORjuniperex4200Match-
ORjuniperex4300Match-
ORjuniperex4500Match-
ORjuniperex4550Match-
ORjuniperex4600Match-
ORjuniperex4650Match-
ORjuniperex6210Match-
ORjuniperex8208Match-
ORjuniperex8216Match-
ORjuniperex9204Match-
ORjuniperex9208Match-
ORjuniperex9214Match-
ORjuniperex9251Match-
ORjuniperex9253Match-
ORjuniperocx1100Match-
ORjuniperqfx10002Match-
ORjuniperqfx10008Match-
ORjuniperqfx10016Match-
ORjuniperqfx3500Match-
ORjuniperqfx3600Match-
ORjuniperqfx5100Match-
ORjuniperqfx5110Match-
ORjuniperqfx5120Match-
ORjuniperqfx5200Match-
ORjuniperqfx5210Match-
Node
juniperjunosMatch14.1x53
ORjuniperjunosMatch14.1x53d10
ORjuniperjunosMatch14.1x53d121
ORjuniperjunosMatch14.1x53d15
ORjuniperjunosMatch14.1x53d16
ORjuniperjunosMatch14.1x53d20
ORjuniperjunosMatch14.1x53d25
ORjuniperjunosMatch14.1x53d26
ORjuniperjunosMatch14.1x53d27
ORjuniperjunosMatch14.1x53d30
ORjuniperjunosMatch14.1x53d35
ORjuniperjunosMatch14.1x53d40
ORjuniperjunosMatch14.1x53d42
ORjuniperjunosMatch14.1x53d43
ORjuniperjunosMatch14.1x53d44
ORjuniperjunosMatch14.1x53d45
ORjuniperjunosMatch14.1x53d46
ORjuniperjunosMatch14.1x53d47
juniperqfx3000-gMatch-
ORjuniperqfx3000-mMatch-
Node
juniperjunosMatch15.1f6
Node
juniperjunosMatch15.1
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
Node
juniperjunosMatch15.1x49
ORjuniperjunosMatch15.1x49d10
ORjuniperjunosMatch15.1x49d100
ORjuniperjunosMatch15.1x49d110
ORjuniperjunosMatch15.1x49d120
ORjuniperjunosMatch15.1x49d130
ORjuniperjunosMatch15.1x49d20
ORjuniperjunosMatch15.1x49d30
ORjuniperjunosMatch15.1x49d35
ORjuniperjunosMatch15.1x49d40
ORjuniperjunosMatch15.1x49d45
ORjuniperjunosMatch15.1x49d50
ORjuniperjunosMatch15.1x49d60
ORjuniperjunosMatch15.1x49d65
ORjuniperjunosMatch15.1x49d70
ORjuniperjunosMatch15.1x49d75
ORjuniperjunosMatch15.1x49d80
ORjuniperjunosMatch15.1x49d90
junipersrx1500Match-
ORjunipersrx300Match-
ORjunipersrx320Match-
ORjunipersrx340Match-
ORjunipersrx345Match-
ORjunipersrx4100Match-
ORjunipersrx4200Match-
ORjunipersrx5400Match-
ORjunipersrx550_hmMatch-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
Node
juniperjunosMatch15.1x53
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
juniperex2300Match-
ORjuniperex3400Match-
Node
juniperjunosMatch15.1x53
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
juniperqfx10002Match-
ORjuniperqfx10008Match-
ORjuniperqfx10016Match-
Node
juniperjunosMatch15.1x53
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
juniperqfx5110Match-
ORjuniperqfx5200Match-
Node
juniperjunosMatch15.1x53
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
junipernfx150Match-
ORjunipernfx250Match-
Node
juniperjunosMatch16.1
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
Node
juniperjunosMatch16.1x65d30
ORjuniperjunosMatch16.1x65d35
ORjuniperjunosMatch16.1x65d40
Node
juniperjunosMatch16.2
ORjuniperjunosMatch16.2r1
Node
juniperjunosMatch17.1
Node
juniperjunosMatch17.2x75
Node
juniperjunosMatch17.3
Node
juniperjunosMatch17.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:* |
| juniper | junos | 12.1x46 | cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:* |
CNA Affected
[
{
"platforms": [
"SRX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "12.1X46-D77",
"status": "affected",
"version": "12.1X46",
"versionType": "custom"
},
{
"lessThan": "12.3X48-D75",
"status": "affected",
"version": "12.3X48",
"versionType": "custom"
},
{
"lessThan": "15.1X49-D140",
"status": "affected",
"version": "15.1X49",
"versionType": "custom"
}
]
},
{
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "12.3R12-S10",
"status": "affected",
"version": "12.3",
"versionType": "custom"
},
{
"lessThan": "15.1F6-S10",
"status": "affected",
"version": "15.1F6",
"versionType": "custom"
},
{
"lessThan": "15.1R4-S9 15.1R7",
"status": "affected",
"version": "15.1",
"versionType": "custom"
},
{
"lessThan": "16.1R3-S8 16.1R4-S8 16.1R5-S4 16.1R6-S4 16.1R7",
"status": "affected",
"version": "16.1",
"versionType": "custom"
},
{
"lessThan": "16.1X65-D48",
"status": "affected",
"version": "16.1X65",
"versionType": "custom"
},
{
"lessThan": "16.2R1-S6 16.2R3",
"status": "affected",
"version": "16.2",
"versionType": "custom"
},
{
"lessThan": "17.1R1-S7 17.1R2-S6 17.1R3",
"status": "affected",
"version": "17.1",
"versionType": "custom"
},
{
"lessThan": "17.2R1-S6 17.2R2-S3 17.2R3",
"status": "affected",
"version": "17.2",
"versionType": "custom"
},
{
"lessThan": "17.2X75-D100 17.2X75-D42 17.2X75-D91",
"status": "affected",
"version": "17.2X75",
"versionType": "custom"
},
{
"lessThan": "17.3R1-S4 17.3R2-S2 17.3R3",
"status": "affected",
"version": "17.3",
"versionType": "custom"
},
{
"lessThan": "17.4R1-S3 17.4R2",
"status": "affected",
"version": "17.4",
"versionType": "custom"
}
]
},
{
"platforms": [
"QFX/EX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "14.1X53-D47",
"status": "affected",
"version": "14.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"QFabric Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "14.1X53-D130",
"status": "affected",
"version": "14.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"EX2300/EX3400 Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D59",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"QFX10K Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D67",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"QFX5200/QFX5110 Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D233",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"NFX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D471 15.1X53-D490",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
}
]Related
nessus
nessus
Juniper Junos RPD MPLS RCE (JSA10877)
2018-10-19 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2018-0043
2018-10-10 18:29:00
prion
prion
Remote code execution
2018-10-10 18:29:00
CVSS2
5.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.009
Percentile
82.5%
Related for CVE-2018-0043