CVE-2018-0050

Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.

Severity Score

5.9

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D48 on QFX Switching; 14.2 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4. This issue does not affect versions of Junos OS before 14.1R1. Junos OS RSVP only supports IPv4. IPv6 is not affected by this issue. This issue require it to be received on an interface configured to receive this type of traffic.

Una vulnerabilidad de manejo de errores en el RPD (Routing Protocols Daemon) de Juniper Networks Junos OS permite que un atacante provoque el cierre inesperado de RPD. La recepción continuada de este paquete MPLS RSVP mal formado provocará una condición sostenida de denegación de servicio (DoS). Las versiones afectadas de Juniper Networks Junos OS son: 14.1 en versiones anteriores a la 14.1R8-S5, 14.1R9; 14.1X53 en versiones anteriores a la 14.1X53-D48 en QFX Switching; 14.2 en versiones anteriores a la 14.1X53-D130 en QFabric System; 14.2 en versiones anteriores a la 14.2R4. Este problema no afecta a las versiones de Junos OS anteriores a la 14.1R1. Junos OS RSVP solo soporta el protocolo IPv4. IPv6 no se ha visto afectado por este problema. Este problema requiere que se reciba en una interfaz configurada para recibir este tipo de tráfico.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2017-11-16 CVE Reserved
2018-10-10 CVE Published
2024-07-25 EPSS Updated
2024-09-17 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (3)

URL	Tag	Source
http://www.securityfocus.com/bid/106206	Third Party Advisory
http://www.securitytracker.com/id/1041851	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/JSA10884	2019-10-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		r9		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d10		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d121		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d15		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d16		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d25		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d26		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d27		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d30		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d35		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d40		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d42		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d43		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d44		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d45		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d46		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d47		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d10		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d121		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d15		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d16		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d25		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d26		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d27		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d30		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d35		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d40		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d42		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d43		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d44		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d45		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d46		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d47		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1x53 Search vendor "Juniper" for product "Junos" and version "14.1x53"		d48		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.2 Search vendor "Juniper" for product "Junos" and version "14.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.2 Search vendor "Juniper" for product "Junos" and version "14.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.2 Search vendor "Juniper" for product "Junos" and version "14.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.2 Search vendor "Juniper" for product "Junos" and version "14.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.2 Search vendor "Juniper" for product "Junos" and version "14.2"		r3		Affected