Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT (Juniper Networks Junos OS)

CVE-2018-0017
HIGH 7.5

At a glance

Source
NVD
EPSS
EPSS 1.86 % · percentile 79 ()
State
PUBLISHED
Published
Updated
Assigner
juniper
NVD status
Modified

Search on…

Description

A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D72; 12.3X48 versions prior to 12.3X48-D55; 15.1X49 versions prior to 15.1X49-D90.

Weaknesses (CWE)

  • CWE-20 — Improper Input Validation

References

Scores

VersionScoreVectorScored by
CVSS 3.0HIGH 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper
CVSS 3.0HIGH 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · sirt@juniper.net (Secondary)
CVSS 3.0MEDIUM 6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0MEDIUM 6.8AV:N/AC:L/Au:S/C:N/I:N/A:CNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Juniper Networks · Junos OSaffected 12.1X46 < 12.1X46-D76 ; affected 12.3X48 < 12.3X48-D55 ; affected 15.1X49 < 15.1X49-D90

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD