cnvd - cnvd-2018-02840

cnvd-2018-02840

Vulnerability from cnvd

Title: Juniper Networks Junos OS拒绝服务漏洞（CNVD-2018-02840）

Description:

Juniper QFX和EX Series switches都是美国瞻博网络（Juniper Networks）公司的交换机产品。Junos OS是运行在其中的一套操作系统。

Juniper QFX和EX Series交换机上的Junos OS 14.1X53-D40之前的14.1X53版本、15.1X53-D55之前的15.1X53版本和15.1R7之前的15.1版本存在拒绝服务漏洞。攻击者可利用该漏洞造成拒绝服务。

Severity: 中

Patch Name: Juniper Networks Junos OS拒绝服务漏洞（CNVD-2018-02840）的补丁

Patch Description:

Juniper QFX和EX Series switches都是美国瞻博网络（Juniper Networks）公司的交换机产品。Junos OS是运行在其中的一套操作系统。

Juniper QFX和EX Series交换机上的Junos OS 14.1X53-D40之前的14.1X53版本、15.1X53-D55之前的15.1X53版本和15.1R7之前的15.1版本存在拒绝服务漏洞。攻击者可利用该漏洞造成拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10833&actp=METADATA

Reference: https://www.securitytracker.com/id/1040182

Impacted products

Name
['Juniper Networks Juniper QFX Series 14.1X53<(14.1X53-D40)', 'Juniper Networks Juniper QFX Series 15.1X53<(15.1X53-D55)', 'Juniper Networks Juniper QFX Series 15.1<(15.1R7)', 'Juniper Networks Juniper EX Series 14.1X53<(14.1X53-D40)', 'Juniper Networks Juniper EX Series 15.1X53<(15.1X53-D55)', 'Juniper Networks Juniper EX Series 15.1<(15.1R7)']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0005"
    }
  },
  "description": "Juniper QFX\u548cEX Series switches\u90fd\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4ea4\u6362\u673a\u4ea7\u54c1\u3002Junos OS\u662f\u8fd0\u884c\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nJuniper QFX\u548cEX Series\u4ea4\u6362\u673a\u4e0a\u7684Junos OS 14.1X53-D40\u4e4b\u524d\u768414.1X53\u7248\u672c\u300115.1X53-D55\u4e4b\u524d\u768415.1X53\u7248\u672c\u548c15.1R7\u4e4b\u524d\u768415.1\u7248\u672c\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Juniper Networks",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10833\u0026actp=METADATA",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-02840",
  "openTime": "2018-02-06",
  "patchDescription": "Juniper QFX\u548cEX Series switches\u90fd\u662f\u7f8e\u56fd\u77bb\u535a\u7f51\u7edc\uff08Juniper Networks\uff09\u516c\u53f8\u7684\u4ea4\u6362\u673a\u4ea7\u54c1\u3002Junos OS\u662f\u8fd0\u884c\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nJuniper QFX\u548cEX Series\u4ea4\u6362\u673a\u4e0a\u7684Junos OS 14.1X53-D40\u4e4b\u524d\u768414.1X53\u7248\u672c\u300115.1X53-D55\u4e4b\u524d\u768415.1X53\u7248\u672c\u548c15.1R7\u4e4b\u524d\u768415.1\u7248\u672c\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Networks Junos OS\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2018-02840\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Juniper Networks Juniper QFX Series 14.1X53\u003c(14.1X53-D40)",
      "Juniper Networks Juniper QFX Series 15.1X53\u003c(15.1X53-D55)",
      "Juniper Networks Juniper QFX Series 15.1\u003c(15.1R7)",
      "Juniper Networks Juniper EX Series 14.1X53\u003c(14.1X53-D40)",
      "Juniper Networks Juniper EX Series 15.1X53\u003c(15.1X53-D55)",
      "Juniper Networks Juniper EX Series 15.1\u003c(15.1R7)"
    ]
  },
  "referenceLink": "https://www.securitytracker.com/id/1040182",
  "serverity": "\u4e2d",
  "submitTime": "2018-01-17",
  "title": "Juniper Networks Junos OS\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2018-02840\uff09"
}

CVE-2018-0005 (GCVE-0-2018-0005)

Vulnerability from cvelistv5

Published

2018-01-10 22:00

Modified

2024-09-17 01:51

Severity ?

7.4 (High) - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE

QFX and EX Series switches may forward traffic instead of dropping traffic which can lead to denials of services or other unintended conditions.

Summary

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.

References

▼	URL	Tags
	https://kb.juniper.net/JSA10833	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1040182	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	Juniper Networks	Junos OS	Version: 14.1X53 < 14.1X53-D40 Version: 15.1X53 < 15.1X53-D55 Version: 15.1 < 15.1R7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:14:16.097Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA10833"
          },
          {
            "name": "1040182",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040182"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "14.1X53-D40",
              "status": "affected",
              "version": "14.1X53",
              "versionType": "custom"
            },
            {
              "lessThan": "15.1X53-D55",
              "status": "affected",
              "version": "15.1X53",
              "versionType": "custom"
            },
            {
              "lessThan": "15.1R7",
              "status": "affected",
              "version": "15.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-01-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "QFX and EX Series switches may forward traffic instead of dropping traffic which can lead to denials of services or other unintended conditions.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-14T10:57:01",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA10833"
        },
        {
          "name": "1040182",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040182"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: 14.1X53-D40, 15.1X53-D55, 15.1X53-D60, 16.1R1, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA10833",
        "defect": [
          "1105372"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.",
      "workarounds": [
        {
          "lang": "en",
          "value": "To decrease the risk of seeing the issue, increase the MAC move limit rate on the device, or to work around the issue until a fix can be taken, remove the MAC move limit from the devices running configuration.  These actions may introduce other possible unintended consequences to customer environments and should be evaluated carefully on a case-by-case basis and are not complete mitigations."
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2018-01-10T17:00:00.000Z",
          "ID": "CVE-2018-0005",
          "STATE": "PUBLIC",
          "TITLE": "Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic."
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_name": "14.1X53",
                            "version_value": "14.1X53-D40"
                          },
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_name": "15.1X53",
                            "version_value": "15.1X53-D55"
                          },
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_name": "15.1",
                            "version_value": "15.1R7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "QFX and EX Series switches may forward traffic instead of dropping traffic which can lead to denials of services or other unintended conditions."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA10833",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA10833"
            },
            {
              "name": "1040182",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040182"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: 14.1X53-D40, 15.1X53-D55, 15.1X53-D60, 16.1R1, and all subsequent releases."
          }
        ],
        "source": {
          "advisory": "JSA10833",
          "defect": [
            "1105372"
          ],
          "discovery": "INTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "To decrease the risk of seeing the issue, increase the MAC move limit rate on the device, or to work around the issue until a fix can be taken, remove the MAC move limit from the devices running configuration.  These actions may introduce other possible unintended consequences to customer environments and should be evaluated carefully on a case-by-case basis and are not complete mitigations."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2018-0005",
    "datePublished": "2018-01-10T22:00:00Z",
    "dateReserved": "2017-11-16T00:00:00",
    "dateUpdated": "2024-09-17T01:51:13.097Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted