Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2018-0048 | First vendor Publication | 2018-10-10 |
Vendor | Cve | Last vendor Modification | 2019-10-09 |
Security-Database Scoring CVSS v3
Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | |||
---|---|---|---|
Overall CVSS Score | 7.5 | ||
Base Score | 7.5 | Environmental Score | 7.5 |
impact SubScore | 3.6 | Temporal Score | 7.5 |
Exploitabality Sub Score | 3.9 | ||
Attack Vector | Network | Attack Complexity | Low |
Privileges Required | None | User Interaction | None |
Scope | Unchanged | Confidentiality Impact | None |
Integrity Impact | None | Availability Impact | High |
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
---|---|---|---|
Cvss Base Score | 5 | Attack Range | Network |
Cvss Impact Score | 2.9 | Attack Complexity | Low |
Cvss Expoit Score | 10 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue only affects devices with JET support running Junos OS 17.2R1 and subsequent releases. Other versions of Junos OS are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.1 versions prior to 18.1R2-S3, 18.1R3; |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0048 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2018-10-19 | Name : The remote device is missing a vendor-supplied security patch. File : juniper_jsa10882.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Source | Url |
---|---|
BID | http://www.securityfocus.com/bid/105564 |
CONFIRM | https://kb.juniper.net/JSA10882 |
SECTRACK | http://www.securitytracker.com/id/1041849 |
Alert History
Date | Informations |
---|---|
2024-02-02 01:50:03 |
|
2024-02-01 12:14:08 |
|
2023-09-05 12:48:00 |
|
2023-09-05 01:13:52 |
|
2023-09-02 12:47:32 |
|
2023-09-02 01:14:08 |
|
2023-08-12 12:51:15 |
|
2023-08-12 01:13:25 |
|
2023-08-11 12:45:34 |
|
2023-08-11 01:13:46 |
|
2023-08-06 12:44:09 |
|
2023-08-06 01:13:22 |
|
2023-08-04 12:44:23 |
|
2023-08-04 01:13:28 |
|
2023-07-14 12:44:25 |
|
2023-07-14 01:13:29 |
|
2023-03-29 01:46:04 |
|
2023-03-28 12:13:50 |
|
2022-10-11 12:39:50 |
|
2022-10-11 01:13:31 |
|
2021-05-04 13:07:20 |
|
2021-04-22 02:21:05 |
|
2020-05-23 01:04:56 |
|
2019-10-10 05:20:09 |
|
2019-04-16 12:09:05 |
|
2019-02-14 17:19:01 |
|
2018-10-16 17:20:02 |
|
2018-10-11 17:19:46 |
|
2018-10-11 00:20:10 |
|