CVE-2018-0061 — Uncontrolled Resource Consumption in Networks Junos OS

CWE-400 — Uncontrolled Resource Consumption7 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.4%
top 37.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Juniper Networks Junos OSJuniper JunosJuniper Junos OS+2 more
Timeline
PublishedOct 10
Latest updateMay 13

Description

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system performance. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81 on SRX Series; 12.3 versions prior to 12.3R12-S11; 12.3X48 versions prior to 12.3X48-D80 on SRX Series; 15.1 versions prior to 15.1R7; 15.1X49 versions prior to 15.1X49-D150, 15.1X49-D160 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages5 packages

▶CVEListV5juniper_networks/junos_os12.1X46 — 12.1X46-D81+16
▶NVDjuniper/junos14 versions+13

🔴Vulnerability Details

1
GHSA
GHSA-mg2c-wjpf-6pjp: A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect syst↗2022-05-13
▶

📋Vendor Advisories

1
Juniper
CVE-2018-0061: A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect syst↗2018-10-10
▶

💬Community

4
Bugzilla
CVE-2017-7846 Mozilla: JavaScript Execution via RSS in mailbox:// origin↗2018-01-02
▶
Bugzilla
CVE-2017-7829 Mozilla: From address with encoded null character is cut off in message header display↗2018-01-02
▶
Bugzilla
CVE-2017-7848 Mozilla: RSS Feed vulnerable to new line Injection↗2018-01-02
▶
Bugzilla
CVE-2017-7847 Mozilla: Local path string can be leaked from RSS feed↗2018-01-02
▶
CVE-2018-0061 — Uncontrolled Resource Consumption | cvebase