CVE-2018-0017

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D72; 12.3X48 versions prior to 12.3X48-D55; 15.1X49 versions prior to 15.1X49-D90.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS	>= 12.1X46, < 12.1X46-D76; >= 12.3X48, < 12.3X48-D55; >= 15.1X49, < 15.1X49-D90

References

http://www.securityfocus.com/bid/103749Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040785Third Party Advisory, VDB Entry
https://kb.juniper.net/JSA10845Vendor Advisory
http://www.securityfocus.com/bid/103749Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040785Third Party Advisory, VDB Entry
https://kb.juniper.net/JSA10845Vendor Advisory

Timeline

Published: Apr 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-00185.9On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules CVE-2018-00195.9A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib2d) may allow a remote network based attacker to cause the mib2d process to cras CVE-2018-00207.5Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart. Receip CVE-2018-00218.8If all 64 digits of the connectivity association name (CKN) key or all 32 digits of the connectivity association key (CAK) key are not confi CVE-2018-00227.5A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specifi CVE-2018-00235.5JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configura CVE-2018-00247.8An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker CVE-2018-00258.1When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials CVE-2018-00267.5After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by runn CVE-2018-00275.9Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, r CVE-2018-00296.5While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause th CVE-2018-00307.5Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously se