Improper input validation in Juniper Junos
CVE-2018-0037
Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. Due to design improvements, this issue does not affect Junos OS 16.1R1, and all subsequent releases. This issue only affects the receiving BGP device and is non-transitive in nature. Affected releases are Juniper Networks Junos OS: 15.1F5 versions starting from 15.1F5-S7 and all subsequent releases; 15.1F6 versions starting from 15.1F6-S3 and later releases prior to 15.1F6-S10; 15.1F7 versions 15.1 versions starting from 15.1R5 and later releases, including the Service Releases based on 15.1R5 and on 15.1R6 prior to 15.1R6-S6 and 15.1R7;
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.037 (89.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 89.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.038 · newest: 0.037 · change: -0.000
Affected products
- Juniper Junos — versions 15.1
- Juniper Networks Junos OS — versions 15.1R5, 15.1F6-S3, 15.1F5-S7
Weakness classification (CWE)
References
- kb.juniper.net/JSA10871 (Vendor Advisory)
- www.securitytracker.com/id/1041339 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-0037?
- CVE-2018-0037 is a critical-severity vulnerability in Juniper Junos, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2018-07-11.
- How severe is CVE-2018-0037?
- Critical severity. CVSS v3 base score is 9.8 out of 10.