CVE-2018-0034

Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

State
Published
Severity
5.3 Medium
Published
Jul 11, 2018
Updated
Sep 16, 2024
Reserved
Nov 16, 2017

Read the record on cve.org

Description

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing using the JDHCPD daemon. This issue does not affect IPv4 DHCP packet processing. Affected releases are Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S10 on EX Series; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200; 15.1X53 versions prior to 15.1X53-D471 on NFX 150, NFX 250; 16.1 versions prior to 16.1R3-S9, 16.1R4-S8, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2.

Scores

CVSSScoreVectorSource
3.05.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Ljuniper

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 12.3X48 to before 12.3X48-D70Affected
  • 15.1X49 to before 15.1X49-D140Affected
Junos OSJuniper Networks
  • 14.1X53 to before 14.1X53-D47Affected
Junos OSJuniper Networks
  • 14.1X53 to before 14.1X53-D130Affected
Junos OSJuniper Networks
  • 15.1 to before 15.1R4-S9, 15.1R6-S6, 15.1R7Affected
  • 16.1 to before 16.1R3-S9, 16.1R4-S8, 16.1R5-S4, 16.1R6-S3, 16.1R7Affected
  • 16.2 to before 16.2R2-S5, 16.2R3Affected
  • 17.1 to before 17.1R1-S7, 17.1R2-S7, 17.1R3Affected
  • 17.2 to before 17.2R1-S6, 17.2R2-S4, 17.2R3Affected
  • 17.3 to before 17.3R1-S4, 17.3R2-S2, 17.3R3Affected
  • 17.4 to before 17.4R1-S3, 17.4R2Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D233Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D471Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D67Affected
Junos OSJuniper Networks
  • 12.3 to before 12.3R12-S10Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.