CVE-2018-0020

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2018
Source publication: Apr 11, 2018
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to other BGP peers. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D130 on SRX; 15.1X53 versions prior to 15.1X53-D66 on QFX10K; 15.1X53 versions prior to 15.1X53-D58 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S3, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D47; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R2-S3, 17.1R3; 17.2 versions prior to 17.2R1-S3, 17.2R2-S1, 17.2R3; 17.2X75 versions prior to 17.2X75-D70; 13.2 versions above and including 13.2R1. Versions prior to 13.2R1 are not affected. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: Unknown
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
14.1X53	`affected`	custom	14.1X53-D47	Unavailable	None listed
15.1	`affected`	custom	15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7	Unavailable	None listed
16.1	`affected`	custom	16.1R3-S8, 16.1R4-S9, 16.1R5-S3, 16.1R6-S3, 16.1R7	Unavailable	None listed
16.1X65	`affected`	custom	16.1X65-D47	Unavailable	None listed
16.2	`affected`	custom	16.2R1-S6, 16.2R2-S5, 16.2R3	Unavailable	None listed
17.1	`affected`	custom	17.1R2-S3, 17.1R3	Unavailable	None listed
17.2	`affected`	custom	17.2R1-S3, 17.2R2-S1, 17.2R3	Unavailable	None listed
17.2X75	`affected`	custom	17.2X75-D70	Unavailable	None listed
all	`unaffected`	custom	13.2R1	Unavailable	None listed
13.2R1	`affected`	custom	13.2*	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: SRX
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X49	`affected`	custom	15.1X49-D130	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: QFX10K
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X53	`affected`	custom	15.1X53-D66	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: EX2300/EX3400
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X53	`affected`	custom	15.1X53-D58	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: QFX5200/QFX5110
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X53	`affected`	custom	15.1X53-D233	Unavailable	None listed

Junos OS

Vendor: Juniper Networks
Product: Junos OS
Platforms: NFX
Default status: Unknown

Junos OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
15.1X53	`affected`	custom	15.1X53-D471	Unavailable	None listed