Details of VAR-201810-0067

ID

VAR-201810-0067

CVE

CVE-2018-0045

TITLE

Juniper Networks Junos OS Input validation vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-013702

DESCRIPTION

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a prolonged denial of service. This issue may occur when the Junos OS device is configured for Draft-Rosen multicast virtual private network (MVPN). The VPN is multicast-enabled and configured to use Protocol Independent Multicast (PIM) protocol within the VPN. This issue can only be exploited from the PE device within the MPLS domain which is capable of forwarding IP multicast traffic in core. End-users connected to the CE device cannot cause this crash. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1F6; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX Series; 16.1 versions prior to 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S6, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R2-S4, 17.2R3; 17.3 versions prior to 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2. No other Juniper Networks products or platforms are affected by this issue. Juniper Networks Junos OS Contains an input validation vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The operating system provides a secure programming interface and Junos SDK. A security vulnerability exists in Juniper Junos OS

Trust: 1.71

sources: NVD: CVE-2018-0045 // JVNDB: JVNDB-2018-013702 // VULHUB: VHN-118247

AFFECTED PRODUCTS

vendor:	juniper	model:	junos	scope:	eq	version:	15.1x53	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	17.3	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	17.1	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	17.4	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	18.1	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	15.1	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	12.3x48	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	16.2	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	15.1x49	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	12.1x46	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	16.1	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	12.3	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	17.2	Trust: 1.0
vendor:	juniper	model:	junos os	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2018-013702 // NVD: CVE-2018-0045

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-0045
value:	HIGH
Trust: 1.0
sirt@juniper.net:	CVE-2018-0045
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-0045
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201810-513
value:	HIGH
Trust: 0.6
VULHUB:	VHN-118247
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2018-0045
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	6.5
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-118247
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:A/AC:L/AU:N/C:P/I:P/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	6.5
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-0045
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 2.8

sources: VULHUB: VHN-118247 // JVNDB: JVNDB-2018-013702 // CNNVD: CNNVD-201810-513 // NVD: CVE-2018-0045 // NVD: CVE-2018-0045

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-118247 // JVNDB: JVNDB-2018-013702 // NVD: CVE-2018-0045

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201810-513

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-201810-513

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-013702

PATCH

title:	JSA10879	url:	https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10879&actp=METADATA	Trust: 0.8
title:	Juniper Junos OS Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=86099	Trust: 0.6

sources: JVNDB: JVNDB-2018-013702 // CNNVD: CNNVD-201810-513

EXTERNAL IDS

db:	NVD	id:	CVE-2018-0045	Trust: 2.5
db:	SECTRACK	id:	1041848	Trust: 1.7
db:	JUNIPER	id:	JSA10879	Trust: 1.7
db:	JVNDB	id:	JVNDB-2018-013702	Trust: 0.8
db:	CNNVD	id:	CNNVD-201810-513	Trust: 0.7
db:	VULHUB	id:	VHN-118247	Trust: 0.1

sources: VULHUB: VHN-118247 // JVNDB: JVNDB-2018-013702 // CNNVD: CNNVD-201810-513 // NVD: CVE-2018-0045

REFERENCES

url:	https://kb.juniper.net/jsa10879	Trust: 1.7
url:	http://www.securitytracker.com/id/1041848	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0045	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-0045	Trust: 0.8

sources: VULHUB: VHN-118247 // JVNDB: JVNDB-2018-013702 // CNNVD: CNNVD-201810-513 // NVD: CVE-2018-0045

SOURCES

db:	VULHUB	id:	VHN-118247
db:	JVNDB	id:	JVNDB-2018-013702
db:	CNNVD	id:	CNNVD-201810-513
db:	NVD	id:	CVE-2018-0045

LAST UPDATE DATE

2024-08-14T15:07:52.603000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-118247	date:	2019-10-09T00:00:00
db:	JVNDB	id:	JVNDB-2018-013702	date:	2019-02-28T00:00:00
db:	CNNVD	id:	CNNVD-201810-513	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-0045	date:	2019-10-09T23:31:04.957

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-118247	date:	2018-10-10T00:00:00
db:	JVNDB	id:	JVNDB-2018-013702	date:	2019-02-28T00:00:00
db:	CNNVD	id:	CNNVD-201810-513	date:	2018-10-11T00:00:00
db:	NVD	id:	CVE-2018-0045	date:	2018-10-10T18:29:00.670