PT-2018-8592 · Juniper Networks · Junos

Published 2018-10-10 · Updated 2019-10-09 · CVE-2018-0060

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D40 on SRX Series Juniper Networks Junos OS versions prior to 12.3X48-D20 on SRX Series Juniper Networks Junos OS versions prior to 14.1X53-D40 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100 Juniper Networks Junos OS versions prior to 15.1X49-D20 on SRX Series Juniper Networks Junos OS versions prior to 15.1X53-D68 on QFX10000 Series Juniper Networks Junos OS versions prior to 15.1X53-D235 on QFX5200/QFX5110 Juniper Networks Junos OS versions prior to 15.1X53-D495 on NFX150, NFX250 Juniper Networks Junos OS versions prior to 15.1X53-D590 on EX2300/EX3400 Juniper Networks Junos OS versions prior to 15.1R7-S2

Description: An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not vulnerable to this issue when not configured to use DHCP.

Recommendations: For versions prior to 12.1X46-D40 on SRX Series, update to 12.1X46-D40 or later. For versions prior to 12.3X48-D20 on SRX Series, update to 12.3X48-D20 or later. For versions prior to 14.1X53-D40 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100, update to 14.1X53-D40 or later. For versions prior to 15.1X49-D20 on SRX Series, update to 15.1X49-D20 or later. For versions prior to 15.1X53-D68 on QFX10000 Series, update to 15.1X53-D68 or later. For versions prior to 15.1X53-D235 on QFX5200/QFX5110, update to 15.1X53-D235 or later. For versions prior to 15.1X53-D495 on NFX150, NFX250, update to 15.1X53-D495 or later. For versions prior to 15.1X53-D590 on EX2300/EX3400, update to 15.1X53-D590 or later. For versions prior to 15.1R7-S2, update to 15.1R7-S2 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-0060

Affected Products

Junos

References · 4

• https://kb.juniper.net/JSA10895 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0060 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0060 · Vendor Advisory
• http://securitytracker.com/id/1041858 · Note