« Volver al listado

CVE-2018-0030

Estado: ModificadaAlta (7.5)—

La recepción de un paquete MPLS específico podría provocar que las tarjetas de línea MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) o PTX1K se cierre inesperadamente y se reinicie. Mediante el envío continuo de paquetes MPLS, un atacante puede cerrar repetidamente las tarjetas de línea o PTX1K, provocando una denegación de servicio (DoS) prolongada.

Leer descripción completaMostrar menos

Las versiones afectadas son Juniper Networks Junos OS con MPC7/8/9 o PTX-FPC3 (FPC-P1, FPC-P2) instalados y PTX1K: 15.1F en versiones anteriores a la 15.1F6-S10; 15.1 en versiones anteriores a la 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 en versiones anteriores a la 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 en versiones anteriores a la 16.1X65-D46; 16.2 en versiones anteriores a la 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 en versiones anteriores a la 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 en versiones anteriores a la 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 en versiones anteriores a la 17.2X75-D70, 17.2X75-D90; 17.3 en versiones anteriores a la 17.3R1-S4, 17.3R2 y 17.4 en versiones anteriores a la 17.4R1-S2, 17.4R2. KB25385 contiene más información sobre las tarjetas de línea PFE.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-0030",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "15.1F",
              "lessThan": "15.1F6-S10",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "15.1",
              "lessThan": "15.1R4-S9, 15.1R6-S6, 15.1R7",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "16.1",
              "lessThan": "16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "16.1X65",
              "lessThan": "16.1X65-D46",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "16.2",
              "lessThan": "16.2R1-S6, 16.2R2-S5, 16.2R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.1",
              "lessThan": "17.1R1-S7, 17.1R2-S7, 17.1R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.2",
              "lessThan": "17.2R1-S4, 17.2R2-S4, 17.2R3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.2X75",
              "lessThan": "17.2X75-D70",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.3",
              "lessThan": "17.3R1-S4, 17.3R2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "17.4",
              "lessThan": "17.4R1-S2, 17.4R2",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-07-11T18:29:00.467",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1041325",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10864",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/KB25385",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securitytracker.com/id/1041325",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10864",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/KB25385",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) installed and PTX1K: 15.1F versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D46; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D70, 17.2X75-D90; 17.3 versions prior to 17.3R1-S4, 17.3R2, 17.4 versions prior to 17.4R1-S2, 17.4R2. Refer to KB25385 for more information about PFE line cards."
    },
    {
      "lang": "es",
      "value": "La recepción de un paquete MPLS específico podría provocar que las tarjetas de línea MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) o PTX1K se cierre inesperadamente y se reinicie. Mediante el envío continuo de paquetes MPLS, un atacante puede cerrar repetidamente las tarjetas de línea o PTX1K, provocando una denegación de servicio (DoS) prolongada. Las versiones afectadas son Juniper Networks Junos OS con MPC7/8/9 o PTX-FPC3 (FPC-P1, FPC-P2) instalados y PTX1K: 15.1F en versiones anteriores a la 15.1F6-S10; 15.1 en versiones anteriores a la 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 en versiones anteriores a la 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 en versiones anteriores a la 16.1X65-D46; 16.2 en versiones anteriores a la 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 en versiones anteriores a la 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 en versiones anteriores a la 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 en versiones anteriores a la 17.2X75-D70, 17.2X75-D90; 17.3 en versiones anteriores a la 17.3R1-S4, 17.3R2 y 17.4 en versiones anteriores a la 17.4R1-S2, 17.4R2. KB25385 contiene más información sobre las tarjetas de línea PFE."
    }
  ],
  "lastModified": "2026-06-17T01:29:26.043",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71D211B9-B2FE-4324-AAEE-8825D5238E48"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD0952C4-FFCC-4A78-ADFC-289BD6E269DB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8257676-7AA7-4B39-A8F8-685843D0685B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31001EA8-2C65-4D3D-AEC7-F298692E8752"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AC40ABB-E364-46C9-A904-C0ED02806250"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1x65:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA096D02-3E65-4D84-AB38-DE6DC7270097"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1x65:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A347C15-3ABC-4B11-A9BB-5DF1C73538EE"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1x65:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBCD72E3-22CE-4E9E-9CC5-686C4B163116"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1x65:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46A11513-B901-4E12-8AA7-54D4794595D2"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D571B57-4F4C-4232-9D3B-B2F7AAAB220B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECAE613D-1317-4D2E-8A61-980CD5DEAED8"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11BD757A-99BC-44E8-A95B-2CDDA638E469"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50B47EC5-0276-4799-B536-12B33B5F003B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64EB45C0-E3BD-4C0D-9E97-1DB726D66401"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95473197-2553-4252-B5E5-CAF904C2EA6A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F69A0E5-B61B-405D-B501-9CB306651CEA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38A40E03-F915-4888-87B0-5950F75F097D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "974B6128-ABD2-4D9C-87A1-5F1740DDCB95"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E0CE79A-157D-47DE-BE65-936BC12470EB"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "191A3F26-3C6E-4B5A-9D40-E6ABC2BFA7AF"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2x75:d90:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF95B213-5DAA-4A0A-B813-04673958A746"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}