PT-2018-8558 · Juniper Networks · Junos

Published 2018-01-10 · Updated 2019-10-09 · CVE-2018-0005

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D40 Junos OS versions prior to 15.1X53-D55 Junos OS versions prior to 15.1R7

Description: A issue in QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded can cause the switches to forward traffic instead of dropping it. This can lead to denials of service or other unintended conditions.

Recommendations: For versions prior to 14.1X53-D40, update to version 14.1X53-D40 or later. For versions prior to 15.1X53-D55, update to version 15.1X53-D55 or later. For versions prior to 15.1R7, update to version 15.1R7 or later.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2018-0005

Affected Products

Junos

References · 4

• https://kb.juniper.net/JSA10833 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0005 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0005 · Vendor Advisory
• http://securitytracker.com/id/1040182 · Note