CVE-2018-0032
Summary
| CVE | CVE-2018-0032 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-11 18:29:00 UTC |
| Updated | 2019-10-09 23:31:00 UTC |
| Description | The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this advisory. Earlier releases are unaffected by this vulnerability. This crafted BGP UPDATE does not propagate to other BGP peers. Affected releases are Juniper Networks Junos OS: 16.1X65 versions prior to 16.1X65-D47; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Juniper | Junos | 16.1x65 | All | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d30 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d35 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d40 | All | All |
| Operating System | Juniper | Junos | 17.2x75 | All | All | All |
| Operating System | Juniper | Junos | 17.3 | All | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | All | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | All | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d30 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d35 | All | All |
| Operating System | Juniper | Junos | 16.1x65 | d40 | All | All |
| Operating System | Juniper | Junos | 17.2x75 | All | All | All |
| Operating System | Juniper | Junos | 17.3 | All | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | All | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2018-07 Security Bulletin: Junos OS: RPD crash when receiving a crafted BGP UPDATE (CVE-2018-0032) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| Juniper Junos BGP UPDATE Processing Bug Lets Remote Users Cause the Target 'rpd' Service to Crash - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.