QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-0032

Back to search

CVE-2018-0032

Published: Jul 11, 2018

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.0

7.5

HIGH

Description

The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this advisory. Earlier releases are unaffected by this vulnerability. This crafted BGP UPDATE does not propagate to other BGP peers. Affected releases are Juniper Networks Junos OS: 16.1X65 versions prior to 16.1X65-D47; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.

VendorProductVersions

Juniper Networks

Junos OS

affected
16.1X65 - < 16.1X65-D47
affected
17.2X75 - < 17.2X75-D91, 17.2X75-D110
affected
17.3 - < 17.3R1-S4, 17.3R2
affected
17.4 - < 17.4R1-S3, 17.4R2

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

1041337
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now