What is CVE-2018-0003?

CVE-2018-0003 is a medium-severity vulnerability in Juniper Junos. CVSS score: 6.5/10. Published 2018-01-10.

How severe is CVE-2018-0003?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Juniper Junos

CVE-2018-0003

A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial of service. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71; 12.3 versions prior to 12.3R12-S7; 12.3X48 versions prior to 12.3X48-D55; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D45, 14.1X53-D107; 14.2 versions prior to 14.2R7-S7, 14.2R8; 15.1 versions prior to 15.1F5-S8, 15.1F6-S8, 15.1R5-S6, 15.1R6-S3, 15.1R7; 15.1X49 versions prior to 15.1X49-D100; 15.1X53 versions prior to 15.1X53-D65, 15.1X53-D231; 16.1 versions prior to 16.1R3-S6, 16.1R4-S6, 16.1R5; 16.1X65 versions prior to 16.1X65-D45; 16.2 versions prior to 16.2R2-S1, 16.2R3; 17.1 versions prior to 17.1R2-S2, 17.1R3; 17.2 versions prior to 17.2R1-S3, 17.2R2; 17.2X75 versions prior to 17.2X75-D50. No other Juniper Networks products or platforms are affected by this issue.

Published 2018-01-10 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.009 (58.4th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 58th percentile — 58.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000

Affected products

Juniper Junos — versions 12.1x46, 12.3x48, 15.1x49
Juniper Networks Junos OS — versions 16.1, 15.1X53, 12.3X48

References

www.securityfocus.com/bid/105715 (vdb-entry)
kb.juniper.net/JSA10831 (Patch, Vendor Advisory)
www.securitytracker.com/id/1040179 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2018-0003?: CVE-2018-0003 is a medium-severity vulnerability in Juniper Junos. CVSS score: 6.5/10. Published 2018-01-10.
How severe is CVE-2018-0003?: Medium severity. CVSS v3 base score is 6.5 out of 10.