PT-2018-8558 · Juniper Networks · Junos

Publicado 2018-01-10 · Atualizado 2019-10-09 · CVE-2018-0005

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D40 Junos OS versions prior to 15.1X53-D55 Junos OS versions prior to 15.1R7

Description: A issue in QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded can cause the switches to forward traffic instead of dropping it. This can lead to denials of service or other unintended conditions.

Recommendations: For versions prior to 14.1X53-D40, update to version 14.1X53-D40 or later. For versions prior to 15.1X53-D55, update to version 15.1X53-D55 or later. For versions prior to 15.1R7, update to version 15.1R7 or later.

Correção

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-754

Identificadores relacionados

CVE-2018-0005

Produtos afetados

Junos

Referências · 4

• https://kb.juniper.net/JSA10833 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0005 · Nota de Segurança
• http://securitytracker.com/id/1040182 · Nota
• https://osv.dev/vulnerability/CVE-2018-0005 · Aviso do Fabricante