CVE-2018-0017 — Improper Input Validation in Networks Junos OS

CWE-20 — Improper Input Validation8 documents5 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 34.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Juniper Networks Junos OSJuniper JunosJuniper Junos OS+1 more
Timeline
PublishedApr 11
Latest updateMay 13

Description

A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D72; 12.3X48 versions prior to 12.3X48-D55; 15.1X49 versions prior to 15.1X49-D90.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5juniper_networks/junos_os12.1X46 — 12.1X46-D76+2
▶NVDjuniper/junos12.1x46 — 12.1x46\:d72+2

🔴Vulnerability Details

1
GHSA
GHSA-f925-p85f-x8m2: A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid↗2022-05-13
▶

📋Vendor Advisories

1
Juniper
CVE-2018-0017: A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid↗2018-04-11
▶

💬Community

1
Bugzilla
CVE-2018-14630 moodle: Moodle XML import of ddwtos could lead to intentional remote code execution (MSA-18-0017)↗2018-09-17
▶
CVE-2018-0017 — Improper Input Validation | cvebase