cveboard RSS feed

CVE-2018-0031

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a service interruption (e.g. RPD crash), but receipt of a high rate of UDP packets may be able to contribute to a denial of service attack. This issue only affects processing of transit UDP/IP packets over MPLS, received on an interface with MPLS enabled. TCP packet processing and non-MPLS encapsulated UDP packet processing are unaffected by this issue. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D76; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D66, 12.3X48-D70; 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D131, 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D100; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2; 18.2X75 versions prior to 18.2X75-D5.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
  • SRX Series
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.1X46affectedcustom12.1X46-D76UnavailableNone listed
12.3X48affectedcustom12.3X48-D66, 12.3X48-D70UnavailableNone listed
15.1X49affectedcustom15.1X49-D131, 15.1X49-D140UnavailableNone listed

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
Unknown
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
12.3affectedcustom12.3R12-S10UnavailableNone listed
15.1affectedcustom15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7UnavailableNone listed
16.1affectedcustom16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7UnavailableNone listed
16.2affectedcustom16.2R1-S6, 16.2R2-S5, 16.2R3UnavailableNone listed
17.1affectedcustom17.1R1-S7, 17.1R2-S7, 17.1R3UnavailableNone listed
17.2affectedcustom17.2R1-S6, 17.2R2-S4, 17.2R3UnavailableNone listed
17.2X75affectedcustom17.2X75-D100UnavailableNone listed
17.3affectedcustom17.3R1-S4, 17.3R2-S2, 17.3R3UnavailableNone listed
17.4affectedcustom17.4R1-S3, 17.4R2UnavailableNone listed
18.1affectedcustom18.1R2UnavailableNone listed
18.2X75affectedcustom18.2X75-D5UnavailableNone listed

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
  • EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
14.1X53affectedcustom14.1X53-D47UnavailableNone listed

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
  • EX2300, EX3400
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
15.1X53affectedcustom15.1X53-D59UnavailableNone listed

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
  • QFX10000 Series
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
15.1X53affectedcustom15.1X53-D67UnavailableNone listed

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
  • QFX5110, QFX5200
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
15.1X53affectedcustom15.1X53-D233UnavailableNone listed

Junos OS

Vendor
Juniper Networks
Product
Junos OS
Platforms
  • NFX150, NFX250
Default status
Unknown
Junos OS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
15.1X53affectedcustom15.1X53-D471, 15.1X53-D490UnavailableNone listed