PT-2018-8593 · Juniper Networks · Junos

Published

2018-10-10

·

Updated

2019-10-09

·

CVE-2018-0061

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D81 on SRX Series Junos OS versions prior to 12.3R12-S11 Junos OS versions prior to 12.3X48-D80 on SRX Series Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X49-D150 Junos OS versions prior to 15.1X49-D160 on SRX Series Junos OS versions prior to 15.1X53-D59 on EX2300/EX3400 Series Junos OS versions prior to 15.1X53-D68 on QFX10K Series Junos OS versions prior to 15.1X53-D235 on QFX5200/QFX5110 Series Junos OS versions prior to 15.1X53-D495 on NFX Series Junos OS versions prior to 16.1R4-S12 Junos OS versions prior to 16.1R6-S6 Junos OS versions prior to 16.1R7 Junos OS versions prior to 16.2R2-S7 Junos OS versions prior to 16.2R3 Junos OS versions prior to 17.1R2-S9 Junos OS versions prior to 17.1R3 Junos OS versions prior to 17.2R2-S6 Junos OS versions prior to 17.2R3 Junos OS versions prior to 17.2X75-D100 Junos OS versions prior to 17.3R2-S4 Junos OS versions prior to 17.3R3 Junos OS versions prior to 17.4R1-S5 Junos OS versions prior to 17.4R2 Junos OS versions prior to 18.2X75-D5
Description: A denial of service issue in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage, potentially affecting system performance.
Recommendations: For Junos OS versions prior to 12.1X46-D81 on SRX Series, update to 12.1X46-D81 or later. For Junos OS versions prior to 12.3R12-S11, update to 12.3R12-S11 or later. For Junos OS versions prior to 12.3X48-D80 on SRX Series, update to 12.3X48-D80 or later. For Junos OS versions prior to 15.1R7, update to 15.1R7 or later. For Junos OS versions prior to 15.1X49-D150, update to 15.1X49-D150 or later. For Junos OS versions prior to 15.1X49-D160 on SRX Series, update to 15.1X49-D160 or later. For Junos OS versions prior to 15.1X53-D59 on EX2300/EX3400 Series, update to 15.1X53-D59 or later. For Junos OS versions prior to 15.1X53-D68 on QFX10K Series, update to 15.1X53-D68 or later. For Junos OS versions prior to 15.1X53-D235 on QFX5200/QFX5110 Series, update to 15.1X53-D235 or later. For Junos OS versions prior to 15.1X53-D495 on NFX Series, update to 15.1X53-D495 or later. For Junos OS versions prior to 16.1R4-S12, update to 16.1R4-S12 or later. For Junos OS versions prior to 16.1R6-S6, update to 16.1R6-S6 or later. For Junos OS versions prior to 16.1R7, update to 16.1R7 or later. For Junos OS versions prior to 16.2R2-S7, update to 16.2R2-S7 or later. For Junos OS versions prior to 16.2R3, update to 16.2R3 or later. For Junos OS versions prior to 17.1R2-S9, update to 17.1R2-S9 or later. For Junos OS versions prior to 17.1R3, update to 17.1R3 or later. For Junos OS versions prior to 17.2R2-S6, update to 17.2R2-S6 or later. For Junos OS versions prior to 17.2R3, update to 17.2R3 or later. For Junos OS versions prior to 17.2X75-D100, update to 17.2X75-D100 or later. For Junos OS versions prior to 17.3R2-S4, update to 17.3R2-S4 or later. For Junos OS versions prior to 17.3R3, update to 17.3R3 or later. For Junos OS versions prior to 17.4R1-S5, update to 17.4R1-S5 or later. For Junos OS versions prior to 17.4R2, update to 17.4R2 or later. For Junos OS versions prior to 18.2X75-D5, update to 18.2X75-D5 or later.

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-0061

Affected Products

Junos