CVE-2018-00345.3MediumCWE-20

CVE-2018-0034: Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

Juniper Networks · Junos OS

Vendor fix available · Affected: Juniper Networks Junos OS · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.1%probability of exploitation in the next 30 days

82nd percentile

050100

Higher than 82% of scored CVEs

5.3MediumCVSS 3.0

LowMediumHighCrit.

DescriptionCVE.org

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing using the JDHCPD daemon. This issue does not affect IPv4 DHCP packet processing. Affected releases are Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S10 on EX Series; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200; 15.1X53 versions prior to 15.1X53-D471 on NFX 150, NFX 250; 16.1 versions prior to 16.1R3-S9, 16.1R4-S8, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2.

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Juniper Networks · Junos OSfrom 12.3X48 before 12.3X48-D70; from 15.1X49 before 15.1X49-D140
Juniper Networks · Junos OSfrom 14.1X53 before 14.1X53-D47
Juniper Networks · Junos OSfrom 14.1X53 before 14.1X53-D130
Juniper Networks · Junos OSfrom 15.1 before 15.1R4-S9, 15.1R6-S6, 15.1R7; from 16.1 before 16.1R3-S9, 16.1R4-S8, 16.1R5-S4, 16.1R6-S3, 16.1R7; from 16.2 before 16.2R2-S5, 16.2R3; from 17.1 before 17.1R1-S7, 17.1R2-S7, 17.1R3; from 17.2 before 17.2R1-S6, 17.2R2-S4, 17.2R3; from 17.3 before 17.3R1-S4, 17.3R2-S2, 17.3R3 and 1 more
Juniper Networks · Junos OSfrom 15.1X53 before 15.1X53-D233
Juniper Networks · Junos OSfrom 15.1X53 before 15.1X53-D471
Juniper Networks · Junos OSfrom 15.1X53 before 15.1X53-D67
Juniper Networks · Junos OSfrom 12.3 before 12.3R12-S10

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Improper Input Validation · Input Validation and Logic
Vendor: Juniper Networks
Published: July 2018
Band: Possible (1 to 10%), July 2018

CoverageNo articles yet

No CyberSIXT article names CVE-2018-0034 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.