CVE-2018-0030

Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.

HIGH

7.5

CVSS Score

Published: July 11, 2018 at 06:00 PM UTC

Updated: June 17, 2026 at 01:29 AM UTC

1 product affected across 1 vendorJunos

Using Junos OS by Juniper Networks?

Get instant alerts when new vulnerabilities affect Junos OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

Description

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) installed and PTX1K: 15.1F versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D46; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D70, 17.2X75-D90; 17.3 versions prior to 17.3R1-S4, 17.3R2, 17.4 versions prior to 17.4R1-S2, 17.4R2. Refer to KB25385 for more information about PFE line cards.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos · Juniper Networks

95%

15.1 ≤ v < 15.1R4-S9, 15.1R6-S6, 15.1R715.1F ≤ v < 15.1F6-S1016.1 ≤ v < 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R716.1X65 ≤ v < 16.1X65-D4616.2 ≤ v < 16.2R1-S6, 16.2R2-S5, 16.2R317.1 ≤ v < 17.1R1-S7, 17.1R2-S7, 17.1R317.2 ≤ v < 17.2R1-S4, 17.2R2-S4, 17.2R317.2X75 ≤ v < 17.2X75-D7017.3 ≤ v < 17.3R1-S4, 17.3R217.4 ≤ v < 17.4R1-S2, 17.4R215.1 15.1 f 15.1 f2 15.1 f3 15.1 f4 15.1 f5 15.1 f6 15.1 r1 15.1 r2 15.1 r6-s6 15.1 r7 15.1F 16.1 16.1 r1 16.1 r2 16.1 r3 16.1 r4-s9 16.1 r5-s4 16.1 r6-s3 16.1 r7 16.1X6516.1x6516.1x65 d30 16.1x65 d35 16.1x65 d40 16.2 16.2 r1 16.2 r2-s5 16.2 r3 17.1 17.1 r1 17.1 r2-s7 17.1 r3 17.2 17.2 r1 17.2 r2-s4 17.2 r3 17.2X7517.2x7517.2x75 d90 17.3 17.3 r1 17.3 r2 17.4 17.4 r1 17.4 r2

Affected range stops below 15.1F6-S10, so it looks safe — our inference, not a vendor statement

Affected range stops below 15.1R4-S9, 15.1R6-S6, 15.1R7, so it looks safe — our inference, not a vendor statement

Affected range stops below 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7, so it looks safe — our inference, not a vendor statement

Affected range stops below 16.1X65-D46, so it looks safe — our inference, not a vendor statement

Affected range stops below 16.2R1-S6, 16.2R2-S5, 16.2R3, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.1R1-S7, 17.1R2-S7, 17.1R3, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.2R1-S4, 17.2R2-S4, 17.2R3, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.2X75-D70, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.3R1-S4, 17.3R2, so it looks safe — our inference, not a vendor statement

Affected range stops below 17.4R1-S2, 17.4R2, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1041325

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://kb.juniper.net/JSA10864

x_refsource_MISCVendor Advisory

Source: [email protected]

https://kb.juniper.net/KB25385

CVSS

7.5HIGHjuniper

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-400

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card