PT-2018-1108 · Juniper Networks · Junos

Published 2018-01-10 · Updated 2019-10-09 · CVE-2018-0004

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D50 Junos OS versions prior to 12.3X48-D30 Junos OS versions prior to 12.3R12-S7 Junos OS versions prior to 14.1R8-S4 Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D30 Junos OS versions prior to 14.1X53-D34 Junos OS versions prior to 14.2R8 Junos OS versions prior to 15.1F6 Junos OS versions prior to 15.1R3 Junos OS versions prior to 15.1X49-D40 Junos OS versions prior to 15.1X53-D31 Junos OS versions prior to 15.1X53-D33 Junos OS versions prior to 15.1X53-D60

Description The issue is related to a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem. This can be triggered by a sustained sequence of different types of normal transit traffic when a specific command is issued to the device, affecting one or more threads and running processes. As a result, the device can become inaccessible and stop forwarding traffic until it is rebooted. The issue may reoccur after reboot upon receiving further transit traffic.

Recommendations For versions prior to 12.1X46-D50, update to 12.1X46-D50 or later. For versions prior to 12.3X48-D30, update to 12.3X48-D30 or later. For versions prior to 12.3R12-S7, update to 12.3R12-S7 or later. For versions prior to 14.1R8-S4, update to 14.1R8-S4 or later. For versions prior to 14.1R9, update to 14.1R9 or later. For versions prior to 14.1X53-D30, update to 14.1X53-D30 or later. For versions prior to 14.1X53-D34, update to 14.1X53-D34 or later. For versions prior to 14.2R8, update to 14.2R8 or later. For versions prior to 15.1F6, update to 15.1F6 or later. For versions prior to 15.1R3, update to 15.1R3 or later. For versions prior to 15.1X49-D40, update to 15.1X49-D40 or later. For versions prior to 15.1X53-D31, update to 15.1X53-D31 or later. For versions prior to 15.1X53-D33, update to 15.1X53-D33 or later. For versions prior to 15.1X53-D60, update to 15.1X53-D60 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2018-00516

CVE-2018-0004

Affected Products

Junos

References · 5

• https://osv.dev/vulnerability/CVE-2018-0004 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00516 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0004 · Security Note
• https://kb.juniper.net/JSA10832 · Vendor Advisory
• http://securitytracker.com/id/1040183 · Note