CVE-2018-0003

Description

A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial of service. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71; 12.3 versions prior to 12.3R12-S7; 12.3X48 versions prior to 12.3X48-D55; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D45, 14.1X53-D107; 14.2 versions prior to 14.2R7-S7, 14.2R8; 15.1 versions prior to 15.1F5-S8, 15.1F6-S8, 15.1R5-S6, 15.1R6-S3, 15.1R7; 15.1X49 versions prior to 15.1X49-D100; 15.1X53 versions prior to 15.1X53-D65, 15.1X53-D231; 16.1 versions prior to 16.1R3-S6, 16.1R4-S6, 16.1R5; 16.1X65 versions prior to 16.1X65-D45; 16.2 versions prior to 16.2R2-S1, 16.2R3; 17.1 versions prior to 17.1R2-S2, 17.1R3; 17.2 versions prior to 17.2R1-S3, 17.2R2; 17.2X75 versions prior to 17.2X75-D50. No other Juniper Networks products or platforms are affected by this issue.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.224

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are fixed in junos 12.1x46-d71	NCM
Vulnerabilities CVE-2018-0003,CVE-2018-0004,CVE-2018-0019 are fixed in junos 12.3r12-s7	NCM
Multiple Vulnerabilities are fixed in junos 14.1r8-s5	NCM
Vulnerabilities CVE-2017-10618,CVE-2018-0001,CVE-2018-0003 are fixed in junos 14.2r7-s7	NCM
Vulnerabilities CVE-2017-10611,CVE-2017-10618,CVE-2018-0001,CVE-2018-0003 are fixed in junos 15.1f5-s8	NCM
Vulnerabilities CVE-2018-0003 are fixed in junos 16.1r3-s6	NCM
Vulnerabilities CVE-2018-0003,CVE-2018-0062,CVE-2019-0013,CVE-2019-0043 are fixed in junos 16.2r2-s6	NCM
Vulnerabilities CVE-2017-10611,CVE-2018-0003 are fixed in junos 17.1r2-s2	NCM
Vulnerabilities CVE-2017-10611,CVE-2018-0003,CVE-2018-0020 are fixed in junos 17.2r1-s3	NCM
CVE-2018-0003	NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1
PATCH-1704488	Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234