Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-0017

Опубликовано: 11 апр. 2018
Источник: nvd
CVSS3: 7.5
CVSS3: 6.5
CVSS2: 6.8
EPSS Низкий

Описание

A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D72; 12.3X48 versions prior to 12.3X48-D55; 15.1X49 versions prior to 15.1X49-D90.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
Версия от 12.1x46 (включая) до 12.1x46\:d72 (включая)
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
Версия от 12.3x48 (включая) до 12.3x48\:d55 (включая)
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
Версия от 15.1x49 (включая) до 15.1x49\:d90 (включая)

EPSS

Процентиль: 65%
0.0049
Низкий

7.5 High

CVSS3

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

A vulnerability in the Network Address Translation - Protocol Translation (NAT-PT) feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D72; 12.3X48 versions prior to 12.3X48-D55; 15.1X49 versions prior to 15.1X49-D90.

EPSS

Процентиль: 65%
0.0049
Низкий

7.5 High

CVSS3

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20