CVE-2018-0058

published 2018-10-10

CVE-2018-0058: Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device to reboot. The issue is specific to the…

Priority P3 41 high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device to reboot. The issue is specific to the processing of Broadband Edge (BBE) client route processing on MX Series subscriber management platforms, introduced by the Tomcat (Next Generation Subscriber Management) functionality in Junos OS 15.1. This issue affects no other platforms or configurations. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S2, 15.1R8 on MX Series; 16.1 versions prior to 16.1R4-S11, 16.1R7-S2, 16.1R8 on MX Series; 16.2 versions prior to 16.2R3 on MX Series; 17.1 versions prior to 17.1R2-S9, 17.1R3 on MX Series; 17.2 versions prior to 17.2R2-S6, 17.2R3 on MX Series; 17.3 versions prior to 17.3R2-S4, 17.3R3-S2, 17.3R4 on MX Series; 17.4 versions prior to 17.4R2 on MX Series; 18.1 versions prior to 18.1R2-S3, 18.1R3 on MX Series; 18.2 versions prior to 18.2R1-S1, 18.2R2 on MX Series.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	mx_series	—	—
juniper_networks	junos_os	>= 15.1 < 15.1R7-S2, 15.1R8	15.1R7-S2, 15.1R8
juniper_networks	junos_os	>= 16.1 < 16.1R4-S11, 16.1R7-S2, 16.1R8	16.1R4-S11, 16.1R7-S2, 16.1R8
juniper_networks	junos_os	>= 16.2 < 16.2R3	16.2R3
juniper_networks	junos_os	>= 17.1 < 17.1R2-S9, 17.1R3	17.1R2-S9, 17.1R3
juniper_networks	junos_os	>= 17.2 < 17.2R2-S6, 17.2R3	17.2R2-S6, 17.2R3
juniper_networks	junos_os	>= 17.3 < 17.3R2-S4, 17.3R3-S2, 17.3R4	17.3R2-S4, 17.3R3-S2, 17.3R4
juniper_networks	junos_os	>= 17.4 < 17.4R2	17.4R2
juniper_networks	junos_os	>= 18.1 < 18.1R2-S3, 18.1R3	18.1R2-S3, 18.1R3
juniper_networks	junos_os	>= 18.2 < 18.2R1-S1, 18.2R2	18.2R1-S1, 18.2R2

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 7.8 HIGH AV:N/AC:L/Au:N/C:N/I:N/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20