CVE-2018-0031
Summary
| CVE | CVE-2018-0031 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-11 18:29:00 UTC |
| Updated | 2019-10-09 23:31:00 UTC |
| Description | Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a service interruption (e.g. RPD crash), but receipt of a high rate of UDP packets may be able to contribute to a denial of service attack. This issue only affects processing of transit UDP/IP packets over MPLS, received on an interface with MPLS enabled. TCP packet processing and non-MPLS encapsulated UDP packet processing are unaffected by this issue. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D76; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D66, 12.3X48-D70; 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D131, 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D100; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2; 18.2X75 versions prior to 18.2X75-D5. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Juniper | Ex2300 | - | All | All | All |
| Hardware | Juniper | Ex2300 | - | All | All | All |
| Hardware | Juniper | Ex3400 | - | All | All | All |
| Hardware | Juniper | Ex3400 | - | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d10 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d15 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d20 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d25 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d30 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d35 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d40 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d45 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d50 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d55 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d60 | All | All |
| Operating System | Juniper | Junos | 12.3 | All | All | All |
| Operating System | Juniper | Junos | 12.3 | r1 | All | All |
| Operating System | Juniper | Junos | 12.3 | r11 | All | All |
| Operating System | Juniper | Junos | 12.3 | r12 | All | All |
| Operating System | Juniper | Junos | 12.3 | r2 | All | All |
| Operating System | Juniper | Junos | 12.3 | r3 | All | All |
| Operating System | Juniper | Junos | 12.3 | r4 | All | All |
| Operating System | Juniper | Junos | 12.3 | r5 | All | All |
| Operating System | Juniper | Junos | 12.3 | r6 | All | All |
| Operating System | Juniper | Junos | 12.3 | r7 | All | All |
| Operating System | Juniper | Junos | 12.3 | r8 | All | All |
| Operating System | Juniper | Junos | 12.3 | r9 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | All | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d10 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d15 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d25 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d30 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d35 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d40 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d45 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d50 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d55 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d60 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d65 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d70 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | All | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d10 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d15 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d16 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d26 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d27 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d35 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d40 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1 | All | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r2 | All | All |
| Operating System | Juniper | Junos | 15.1 | r3 | All | All |
| Operating System | Juniper | Junos | 15.1 | r4-s9 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6-s6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r7 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d140 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d35 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d55 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d70 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d75 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d80 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d21 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d210 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d230 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d231 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d232 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d32 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d33 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d34 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d490 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d61 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d62 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d63 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d64 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d66 | All | All |
| Operating System | Juniper | Junos | 16.1 | All | All | All |
| Operating System | Juniper | Junos | 16.1 | r1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r2 | All | All |
| Operating System | Juniper | Junos | 16.1 | r3 | All | All |
| Operating System | Juniper | Junos | 16.1 | r5-s4 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6-s1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r7 | All | All |
| Operating System | Juniper | Junos | 16.2 | All | All | All |
| Operating System | Juniper | Junos | 16.2 | r1 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2-s5 | All | All |
| Operating System | Juniper | Junos | 16.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.1 | All | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.1 | r3 | All | All |
| Operating System | Juniper | Junos | 17.2 | All | All | All |
| Operating System | Juniper | Junos | 17.2 | r1 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2-s4 | All | All |
| Operating System | Juniper | Junos | 17.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.2x75 | All | All | All |
| Operating System | Juniper | Junos | 17.2x75 | d110 | All | All |
| Operating System | Juniper | Junos | 17.3 | All | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.4 | All | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | All | All | All |
| Operating System | Juniper | Junos | 18.1 | r1 | All | All |
| Operating System | Juniper | Junos | 18.2x75 | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | All | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d10 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d15 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d20 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d25 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d30 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d35 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d40 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d45 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d50 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d55 | All | All |
| Operating System | Juniper | Junos | 12.1x46 | d60 | All | All |
| Operating System | Juniper | Junos | 12.3 | All | All | All |
| Operating System | Juniper | Junos | 12.3 | r1 | All | All |
| Operating System | Juniper | Junos | 12.3 | r11 | All | All |
| Operating System | Juniper | Junos | 12.3 | r12 | All | All |
| Operating System | Juniper | Junos | 12.3 | r2 | All | All |
| Operating System | Juniper | Junos | 12.3 | r3 | All | All |
| Operating System | Juniper | Junos | 12.3 | r4 | All | All |
| Operating System | Juniper | Junos | 12.3 | r5 | All | All |
| Operating System | Juniper | Junos | 12.3 | r6 | All | All |
| Operating System | Juniper | Junos | 12.3 | r7 | All | All |
| Operating System | Juniper | Junos | 12.3 | r8 | All | All |
| Operating System | Juniper | Junos | 12.3 | r9 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | All | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d10 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d15 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d25 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d30 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d35 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d40 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d45 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d50 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d55 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d60 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d65 | All | All |
| Operating System | Juniper | Junos | 12.3x48 | d70 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | All | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d10 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d15 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d16 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d26 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d27 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d35 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d40 | All | All |
| Operating System | Juniper | Junos | 14.1x53 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1 | All | All | All |
| Operating System | Juniper | Junos | 15.1 | f4 | All | All |
| Operating System | Juniper | Junos | 15.1 | f6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r2 | All | All |
| Operating System | Juniper | Junos | 15.1 | r3 | All | All |
| Operating System | Juniper | Junos | 15.1 | r4-s9 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6-s6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r7 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d10 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d140 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d35 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d50 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d55 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d70 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d75 | All | All |
| Operating System | Juniper | Junos | 15.1x49 | d80 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d20 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d21 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d210 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d230 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d231 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d232 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d25 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d30 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d32 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d33 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d34 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d40 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d45 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d490 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d60 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d61 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d62 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d63 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d64 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d65 | All | All |
| Operating System | Juniper | Junos | 15.1x53 | d66 | All | All |
| Operating System | Juniper | Junos | 16.1 | All | All | All |
| Operating System | Juniper | Junos | 16.1 | r1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r2 | All | All |
| Operating System | Juniper | Junos | 16.1 | r3 | All | All |
| Operating System | Juniper | Junos | 16.1 | r5-s4 | All | All |
| Operating System | Juniper | Junos | 16.1 | r6-s1 | All | All |
| Operating System | Juniper | Junos | 16.1 | r7 | All | All |
| Operating System | Juniper | Junos | 16.2 | All | All | All |
| Operating System | Juniper | Junos | 16.2 | r1 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2-s5 | All | All |
| Operating System | Juniper | Junos | 16.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.1 | All | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.1 | r3 | All | All |
| Operating System | Juniper | Junos | 17.2 | All | All | All |
| Operating System | Juniper | Junos | 17.2 | r1 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2-s4 | All | All |
| Operating System | Juniper | Junos | 17.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.2x75 | All | All | All |
| Operating System | Juniper | Junos | 17.2x75 | d110 | All | All |
| Operating System | Juniper | Junos | 17.3 | All | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.4 | All | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | All | All | All |
| Operating System | Juniper | Junos | 18.1 | r1 | All | All |
| Operating System | Juniper | Junos | 18.2x75 | All | All | All |
| Hardware | Juniper | Nfx250 | - | All | All | All |
| Hardware | Juniper | Nfx250 | - | All | All | All |
| Hardware | Juniper | Qfx10000 | - | All | All | All |
| Hardware | Juniper | Qfx10000 | - | All | All | All |
| Hardware | Juniper | Qfx5110 | - | All | All | All |
| Hardware | Juniper | Qfx5110 | - | All | All | All |
| Hardware | Juniper | Qfx5200 | - | All | All | All |
| Hardware | Juniper | Qfx5200 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Juniper Junos UDP/MPLS Processing Flaw Lets Remote Users Bypass the Firewall - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| 2018-07 Security Bulletin: Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules (CVE-2018-0031) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Internet2
LEGACY: The Indiana University GlobalNOC
There are currently no legacy QID mappings associated with this CVE.