PT-2018-8574 · Juniper Networks · Junos

Published 2018-07-11 · Updated 2019-10-09 · CVE-2018-0026

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1R4 through 15.1R6 Junos OS versions 15.1X8 prior to 15.1X8.3

Description: The stateless firewall filter configuration may not take effect after a Junos OS device reboot or upgrade. This issue affects firewall filters for every address family. The problem can be identified by running a command to show interfaces, which should display the applied firewall filter, but instead shows no filters applied.

Recommendations: For versions 15.1R4 through 15.1R6, update to a version outside of this range to resolve the issue. For versions 15.1X8 prior to 15.1X8.3, update to version 15.1X8.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2018-0026

Affected Products

Junos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0026 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0026 · Vendor Advisory
• https://kb.juniper.net/JSA10859 · Vendor Advisory
• http://securityfocus.com/bid/104720 · Note
• http://securitytracker.com/id/1041315 · Note