CVE-2018-0050: Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.
Juniper Networks · Junos OS
Fixed in 14.1R1 · Affected: Juniper Networks Junos OS before 14.1R1 · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 83% of scored CVEs
DescriptionCVE.org
An error handling vulnerability in Routing Protocols Daemon (RPD) of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D48 on QFX Switching; 14.2 versions prior to 14.1X53-D130 on QFabric System; 14.2 versions prior to 14.2R4. This issue does not affect versions of Junos OS before 14.1R1. Junos OS RSVP only supports IPv4. IPv6 is not affected by this issue. This issue require it to be received on an interface configured to receive this type of traffic.
Affected products3
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Juniper Networks · Junos OSfrom 14.1 before 14.1R8-S5, 14.1R9; from 14.2 before 14.2R4
- Juniper Networks · Junos OSfrom 14.1X53 before 14.1X53-D48
- Juniper Networks · Junos OSfrom 14.2 before 14.1X53-D130
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Juniper Networks
- Published
- October 2018
CoverageNo articles yet
No CyberSIXT article names CVE-2018-0050 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.