Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0027

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via that interface. This issue only affects Juniper Networks Junos OS 16.1 versions prior to 16.1R3. This issue does not affect Junos releases prior to 16.1R1.

Published

2018-07-11T18:29:00.340

Last Modified

2024-11-21T03:37:23.440

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes

References

http://www.securityfocus.com/bid/104721 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1041318 Third Party Advisory, VDB Entry ([email protected])
https://kb.juniper.net/JSA10861 Mitigation, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/104721 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1041318 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://kb.juniper.net/JSA10861 Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)