CVE Database
/

CVE-2018-0048

Back to search

CVE-2018-0048

Published: Oct 10, 2018

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.0

7.5

HIGH

Description

A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue only affects devices with JET support running Junos OS 17.2R1 and subsequent releases. Other versions of Junos OS are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.1 versions prior to 18.1R2-S3, 18.1R3;

VendorProductVersions

Juniper Networks

Junos OS

affected
17.2 - < 17.2R1-S7, 17.2R2-S6, 17.2R3
affected
17.2X75 - < 17.2X75-D102, 17.2X75-D110
affected
17.3 - < 17.3R2-S4, 17.3R3
affected
17.4 - < 17.4R1-S5, 17.4R2
affected
18.1 - < 18.1R2-S3, 18.1R3

Weaknesses (CWE)

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

105564
vdb-entry
x_refsource_BID
1041849
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2018-0048 | HIGH (7.5) - Security Vulnerability | QwikSec