What is the severity of CVE-2018-0029?

CVE-2018-0029 has a high severity level as it can cause system crashes and restarts during a broadcast storm when the fxp0 interface is in promiscuous mode.

How do I fix CVE-2018-0029?

To mitigate CVE-2018-0029, avoid placing the fxp0 interface into promiscuous mode, especially during a broadcast storm.

Which versions of Junos OS are affected by CVE-2018-0029?

CVE-2018-0029 affects Junos OS versions 15.1 and later, including all relevant updates and revisions.

What devices are impacted by CVE-2018-0029?

Devices running Junos OS 15.1 and later, including single core and multi-core RE platforms, are impacted by CVE-2018-0029.

Is there a patch available for CVE-2018-0029?

Yes, Juniper Networks provides patches in subsequent updates of Junos OS that address the vulnerability described in CVE-2018-0029.

Vulnerability/
CVE-2018-0029

medium

6.5

CWE

400

11/7/2018

5/8/2024

CVE-2018-0029: Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'

First published: Wed Jul 11 2018(Updated: )

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart (vmcore). This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases prior to Junos OS 15.1 are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S11, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R5-S4, 16.1R6-S1, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D90, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Junos OS Evolved	=15.1
Junos OS Evolved	=15.1-a1
Junos OS Evolved	=15.1-f1
Junos OS Evolved	=15.1-f2
Junos OS Evolved	=15.1-f2-s1
Junos OS Evolved	=15.1-f2-s2
Junos OS Evolved	=15.1-f2-s3
Junos OS Evolved	=15.1-f2-s4
Junos OS Evolved	=15.1-f3
Junos OS Evolved	=15.1-f4
Junos OS Evolved	=15.1-f5
Junos OS Evolved	=15.1-f6
Junos OS Evolved	=15.1-r4-s9
Junos OS Evolved	=15.1-r6-s6
Junos OS Evolved	=15.1-r7
Junos OS Evolved	=15.1x49
Junos OS Evolved	=15.1x49-d10
Junos OS Evolved	=15.1x49-d100
Junos OS Evolved	=15.1x49-d110
Junos OS Evolved	=15.1x49-d120
Junos OS Evolved	=15.1x49-d130
Junos OS Evolved	=15.1x49-d20
Junos OS Evolved	=15.1x49-d30
Junos OS Evolved	=15.1x49-d35
Junos OS Evolved	=15.1x49-d40
Junos OS Evolved	=15.1x49-d45
Junos OS Evolved	=15.1x49-d50
Junos OS Evolved	=15.1x49-d55
Junos OS Evolved	=15.1x49-d60
Junos OS Evolved	=15.1x49-d65
Junos OS Evolved	=15.1x49-d70
Junos OS Evolved	=15.1x49-d75
Junos OS Evolved	=15.1x49-d80
Junos OS Evolved	=15.1x49-d90
Junos OS Evolved	=15.1x53
Junos OS Evolved	=15.1x53-d20
Junos OS Evolved	=15.1x53-d21
Junos OS Evolved	=15.1x53-d25
Junos OS Evolved	=15.1x53-d30
Junos OS Evolved	=15.1x53-d32
Junos OS Evolved	=15.1x53-d33
Junos OS Evolved	=15.1x53-d34
Junos OS Evolved	=15.1x53-d40
Junos OS Evolved	=15.1x53-d45
Junos OS Evolved	=15.1x53-d50
Junos OS Evolved	=15.1x53-d51
Junos OS Evolved	=15.1x53-d52
Junos OS Evolved	=15.1x53-d55
Junos OS Evolved	=15.1x53-d56
Junos OS Evolved	=15.1x53-d57
Junos OS Evolved	=15.1x53-d58
Juniper EX2300-24T
Juniper EX3400
Junos OS Evolved	=15.1x53-d210
Junos OS Evolved	=15.1x53-d230
Junos OS Evolved	=15.1x53-d231
Junos OS Evolved	=15.1x53-d232
Junos OS Evolved	=15.1x53-d60
Junos OS Evolved	=15.1x53-d61
Junos OS Evolved	=15.1x53-d62
Junos OS Evolved	=15.1x53-d63
Junos OS Evolved	=15.1x53-d64
Junos OS Evolved	=15.1x53-d65
Junos OS Evolved	=15.1x53-d66
Juniper QFX5110
Juniper QFX5200-32C
Juniper NFX
Junos OS Evolved	=16.1
Junos OS Evolved	=16.1-r1
Junos OS Evolved	=16.1-r2
Junos OS Evolved	=16.1-r3
Junos OS Evolved	=16.1-r5-s4
Junos OS Evolved	=16.1-r6-s1
Junos OS Evolved	=16.1-r7
Junos OS Evolved	=16.2
Junos OS Evolved	=16.2-r1
Junos OS Evolved	=16.2-r2-s5
Junos OS Evolved	=16.2-r3
Junos OS Evolved	=17.1
Junos OS Evolved	=17.1-r1
Junos OS Evolved	=17.1-r2
Junos OS Evolved	=17.1-r2-s7
Junos OS Evolved	=17.1-r3
Junos OS Evolved	=17.2x75
Junos OS Evolved	=17.2x75-d110
Junos OS Evolved	=17.3
Junos OS Evolved	=17.3-r1
Junos OS Evolved	=17.3-r2
Junos OS Evolved	=17.4
Junos OS Evolved	=17.4-r1
Junos OS Evolved	=17.4-r2
Junos OS Evolved	=17.2
Junos OS Evolved	=17.2-r1
Junos OS Evolved	=17.2-r2
Junos OS Evolved	=17.2-r2-s4
Junos OS Evolved	=17.2-r3

Remedy

The following software releases have been updated to resolve this specific issue: 15.1F6-S11*, 15.1R4-S9, 15.1R6-S6, 15.1R7, 15.1X49-D140, 15.1X53-D233, 15.1X53-D471, 15.1X53-D490, 15.1X53-D59, 15.1X53-D67, 16.1R3-S8, 16.1R5-S4, 16.1R6-S1, 16.1R7, 16.2R1-S6, 16.2R2-S5, 16.2R3, 17.1R1-S7, 17.1R2-S7, 17.1R3, 17.2R1-S6, 17.2R2-S4, 17.2R3, 17.2X75-D110, 17.2X75-D90, 17.3R1-S4, 17.3R2, 17.4R1-S3, 17.4R2, 18.1R1, 18.1X75-D10, and all subsequent releases. *Future availability

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-0029?
CVE-2018-0029 has a high severity level as it can cause system crashes and restarts during a broadcast storm when the fxp0 interface is in promiscuous mode.
How do I fix CVE-2018-0029?
To mitigate CVE-2018-0029, avoid placing the fxp0 interface into promiscuous mode, especially during a broadcast storm.
Which versions of Junos OS are affected by CVE-2018-0029?
CVE-2018-0029 affects Junos OS versions 15.1 and later, including all relevant updates and revisions.
What devices are impacted by CVE-2018-0029?
Devices running Junos OS 15.1 and later, including single core and multi-core RE platforms, are impacted by CVE-2018-0029.
Is there a patch available for CVE-2018-0029?
Yes, Juniper Networks provides patches in subsequent updates of Junos OS that address the vulnerability described in CVE-2018-0029.

agent/references
agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/weakness
agent/severity
agent/author
agent/title
agent/description
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/juniper
canonical/junos os evolved
version/junos os evolved/15.1
version/junos os evolved/15.1-a1
version/junos os evolved/15.1-f1
version/junos os evolved/15.1-f2
version/junos os evolved/15.1-f2-s1
version/junos os evolved/15.1-f2-s2
version/junos os evolved/15.1-f2-s3
version/junos os evolved/15.1-f2-s4
version/junos os evolved/15.1-f3
version/junos os evolved/15.1-f4
version/junos os evolved/15.1-f5
version/junos os evolved/15.1-f6
version/junos os evolved/15.1-r4-s9
version/junos os evolved/15.1-r6-s6
version/junos os evolved/15.1-r7
version/junos os evolved/15.1x49
version/junos os evolved/15.1x49-d10
version/junos os evolved/15.1x49-d100
version/junos os evolved/15.1x49-d110
version/junos os evolved/15.1x49-d120
version/junos os evolved/15.1x49-d130
version/junos os evolved/15.1x49-d20
version/junos os evolved/15.1x49-d30
version/junos os evolved/15.1x49-d35
version/junos os evolved/15.1x49-d40
version/junos os evolved/15.1x49-d45
version/junos os evolved/15.1x49-d50
version/junos os evolved/15.1x49-d55
version/junos os evolved/15.1x49-d60
version/junos os evolved/15.1x49-d65
version/junos os evolved/15.1x49-d70
version/junos os evolved/15.1x49-d75
version/junos os evolved/15.1x49-d80
version/junos os evolved/15.1x49-d90
version/junos os evolved/15.1x53
version/junos os evolved/15.1x53-d20
version/junos os evolved/15.1x53-d21
version/junos os evolved/15.1x53-d25
version/junos os evolved/15.1x53-d30
version/junos os evolved/15.1x53-d32
version/junos os evolved/15.1x53-d33
version/junos os evolved/15.1x53-d34
version/junos os evolved/15.1x53-d40
version/junos os evolved/15.1x53-d45
version/junos os evolved/15.1x53-d50
version/junos os evolved/15.1x53-d51
version/junos os evolved/15.1x53-d52
version/junos os evolved/15.1x53-d55
version/junos os evolved/15.1x53-d56
version/junos os evolved/15.1x53-d57
version/junos os evolved/15.1x53-d58
canonical/juniper ex2300-24t
canonical/juniper ex3400
version/junos os evolved/15.1x53-d210
version/junos os evolved/15.1x53-d230
version/junos os evolved/15.1x53-d231
version/junos os evolved/15.1x53-d232
version/junos os evolved/15.1x53-d60
version/junos os evolved/15.1x53-d61
version/junos os evolved/15.1x53-d62
version/junos os evolved/15.1x53-d63
version/junos os evolved/15.1x53-d64
version/junos os evolved/15.1x53-d65
version/junos os evolved/15.1x53-d66
canonical/juniper qfx5110
canonical/juniper qfx5200-32c
canonical/juniper nfx
version/junos os evolved/16.1
version/junos os evolved/16.1-r1
version/junos os evolved/16.1-r2
version/junos os evolved/16.1-r3
version/junos os evolved/16.1-r5-s4
version/junos os evolved/16.1-r6-s1
version/junos os evolved/16.1-r7
version/junos os evolved/16.2
version/junos os evolved/16.2-r1
version/junos os evolved/16.2-r2-s5
version/junos os evolved/16.2-r3
version/junos os evolved/17.1
version/junos os evolved/17.1-r1
version/junos os evolved/17.1-r2
version/junos os evolved/17.1-r2-s7
version/junos os evolved/17.1-r3
version/junos os evolved/17.2x75
version/junos os evolved/17.2x75-d110
version/junos os evolved/17.3
version/junos os evolved/17.3-r1
version/junos os evolved/17.3-r2
version/junos os evolved/17.4
version/junos os evolved/17.4-r1
version/junos os evolved/17.4-r2
version/junos os evolved/17.2
version/junos os evolved/17.2-r1
version/junos os evolved/17.2-r2
version/junos os evolved/17.2-r2-s4
version/junos os evolved/17.2-r3