CVE-2018-0001

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D67; 12.3 versions prior to 12.3R12-S5; 12.3X48 versions prior to 12.3X48-D35; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D44, 14.1X53-D50; 14.2 versions prior to 14.2R7-S7, 14.2R8; 15.1 versions prior to 15.1R3; 15.1X49 versions prior to 15.1X49-D30; 15.1X53 versions prior to 15.1X53-D70.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-00025.9On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device rCVE-2018-00036.5A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the sysCVE-2018-00046.5A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the JunoCVE-2018-00058.8QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. CVE-2018-00065.3A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by CVE-2018-00079.8An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadCVE-2018-00086.2An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute cCVE-2018-00095.9On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP trCVE-2018-00106.5A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URCVE-2018-00115.4A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script oCVE-2018-00127.8Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges.CVE-2018-00136.5A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve