CVE-2018-0014

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-00157.5A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Python debug console and CVE-2018-00167.5Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS device may result in aCVE-2018-00176.5A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a cerCVE-2018-00185.9On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rulesCVE-2018-00195.9A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the mib2d process to crasCVE-2018-00207.5Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart. ReceipCVE-2018-00218.8If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CAK) key are not confiCVE-2018-00227.5A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specifiCVE-2018-00235.5JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuraCVE-2018-00247.8An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attackerCVE-2018-00258.1When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials CVE-2018-00267.5After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by runn
CVE-2018-0014: Medium severity, CVSS 6.5 | Vulnix