CVE-2018-0005: Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

Published Jan 10, 2018

Updated

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.

Affected Software

42 affected components

Juniper Junos=14.1x53

Juniper Junos=14.1x53-d10

Juniper Junos=14.1x53-d15

Juniper Junos=14.1x53-d16

Juniper Junos=14.1x53-d25

Juniper Junos=14.1x53-d26

Juniper Junos=14.1x53-d27

Juniper Junos=14.1x53-d30

Juniper Junos=14.1x53-d35

Juniper Ex Rps

Juniper EX2200

Juniper EX2200-C

Juniper EX2300

Juniper EX2300-C

Juniper EX3300

Juniper EX3400

Juniper EX4200

Juniper EX4300

Juniper EX4550

Juniper EX4600

Juniper EX9200

Juniper QFX10002

Juniper QFX10008

Juniper QFX10016

Juniper QFX5100

Juniper QFX5110

Juniper QFX5200

Juniper Junos=15.1-r1

Juniper Junos=15.1-r2

Juniper Junos=15.1-r3

Juniper Junos=15.1-r4

Juniper Junos=15.1-r5

Juniper Junos=15.1-r6

Juniper Junos=15.1x53-d20

Juniper Junos=15.1x53-d21

Juniper Junos=15.1x53-d30

Juniper Junos=15.1x53-d32

Juniper Junos=15.1x53-d33

Juniper Junos=15.1x53-d34

Juniper Junos=15.1x53-d50

Juniper Junos=15.1x53-d51

Juniper Junos=15.1x53-d52

Remediation

Information

The following software releases have been updated to resolve this specific issue: 14.1X53-D40, 15.1X53-D55, 15.1X53-D60, 16.1R1, and all subsequent releases.

Event History

Jan 10, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2018-0005?

CVE-2018-0005 is a vulnerability found in QFX and EX Series switches that can lead to denials of services or other unintended conditions.

How does CVE-2018-0005 impact Juniper JUNOS?

CVE-2018-0005 affects Juniper JUNOS versions prior to 14.1X53-D40 and 15.1, leading to potential denials of services or other unintended conditions.

What is the severity level of CVE-2018-0005?

The severity level of CVE-2018-0005 is high with a score of 8.8.

How can I fix CVE-2018-0005 vulnerability?

To fix CVE-2018-0005 vulnerability, update your Juniper JUNOS to version 14.1X53-D40 or later.

Where can I find more information about CVE-2018-0005?

More information about CVE-2018-0005 can be found at the following references: [SecurityTracker](http://www.securitytracker.com/id/1040182) and [Juniper Knowledge Base](https://kb.juniper.net/JSA10833).