CVE-2018-0062: Junos OS: Denial of Service in J-Web

Published Oct 10, 2018

Updated

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D60 on SRX Series; 15.1 versions prior to 15.1R7; 15.1F6; 15.1X49 versions prior to 15.1X49-D120 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D470, 15.1X53-D495 on NFX Series; 16.1 versions prior to 16.1R6; 16.2 versions prior to 16.2R2-S6, 16.2R3; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R2. No other Juniper Networks products or platforms are affected by this issue.

Affected Software

117 affected components

Juniper Junos=12.1x46

Juniper Junos=12.1x46-d10

Juniper Junos=12.1x46-d15

Juniper Junos=12.1x46-d20

Juniper Junos=12.1x46-d25

Juniper Junos=12.1x46-d30

Juniper Junos=12.1x46-d35

Juniper Junos=12.1x46-d40

Juniper Junos=12.1x46-d45

Juniper Junos=12.1x46-d50

Juniper Junos=12.1x46-d55

Juniper Junos=12.1x46-d60

Juniper Junos=12.1x46-d65

Juniper Junos=12.3

Juniper Junos=12.3-r1

Juniper Junos=12.3-r11

Juniper Junos=12.3-r2

Juniper Junos=12.3-r3

Juniper Junos=12.3-r4

Juniper Junos=12.3-r5

Juniper Junos=12.3-r6

Juniper Junos=12.3-r7

Juniper Junos=12.3-r8

Juniper Junos=12.3-r9

Juniper Junos=12.3x48

Juniper Junos=12.3x48-d10

Juniper Junos=12.3x48-d15

Juniper Junos=12.3x48-d20

Juniper Junos=12.3x48-d25

Juniper Junos=12.3x48-d30

Juniper Junos=12.3x48-d35

Juniper Junos=12.3x48-d40

Juniper Junos=12.3x48-d45

Juniper Junos=12.3x48-d50

Juniper Junos=12.3x48-d55

Juniper Junos=12.3x48-d60

Juniper Junos=15.1

Juniper Junos=15.1-f2

Juniper Junos=15.1-f3

Juniper Junos=15.1-f4

Juniper Junos=15.1-f5

Juniper Junos=15.1-f6

Juniper Junos=15.1-f7

Juniper Junos=15.1-r1

Juniper Junos=15.1-r2

Juniper Junos=15.1-r3

Juniper Junos=15.1-r4

Juniper Junos=15.1-r5

Juniper Junos=15.1-r6

Juniper Junos=15.1x49

Juniper Junos=15.1x49-d10

Juniper Junos=15.1x49-d100

Juniper Junos=15.1x49-d110

Juniper Junos=15.1x49-d20

Juniper Junos=15.1x49-d30

Juniper Junos=15.1x49-d35

Juniper Junos=15.1x49-d40

Juniper Junos=15.1x49-d45

Juniper Junos=15.1x49-d50

Juniper Junos=15.1x49-d55

Juniper Junos=15.1x49-d60

Juniper Junos=15.1x49-d65

Juniper Junos=15.1x49-d70

Juniper Junos=15.1x49-d75

Juniper Junos=15.1x49-d80

Juniper Junos=15.1x49-d90

Juniper Junos=15.1x53

Juniper Junos=15.1x53-d50

Juniper Junos=15.1x53-d51

Juniper Junos=15.1x53-d52

Juniper Junos=15.1x53-d55

Juniper Junos=15.1x53-d57

Juniper Junos=15.1x53-d58

Juniper EX2300

Juniper EX3400

Juniper Junos=15.1x53-d10

Juniper Junos=15.1x53-d20

Juniper Junos=15.1x53-d21

Juniper Junos=15.1x53-d30

Juniper Junos=15.1x53-d32

Juniper Junos=15.1x53-d33

Juniper Junos=15.1x53-d34

Juniper Junos=15.1x53-d60

Juniper Junos=15.1x53-d61

Juniper Junos=15.1x53-d62

Juniper Junos=15.1x53-d63

Juniper Junos=15.1x53-d64

Juniper Junos=15.1x53-d65

Juniper Junos=15.1x53-d66

Juniper QFX10000

Juniper Junos=15.1x53-d210

Juniper Junos=15.1x53-d230

Juniper Junos=15.1x53-d231

Juniper Junos=15.1x53-d232

Juniper QFX5110

Juniper QFX5200

Juniper Junos=15.1x53-d40

Juniper Junos=15.1x53-d45

Juniper Junos=15.1x53-d495

Juniper NFX Series

Juniper Junos=16.1

Juniper Junos=16.1-r1

Juniper Junos=16.1-r2

Juniper Junos=16.1-r3

Juniper Junos=16.1-r4

Juniper Junos=16.1-r5

Juniper Junos=16.2

Juniper Junos=16.2-r1

Juniper Junos=16.2-r3

Juniper Junos=17.1

Juniper Junos=17.1-r1

Juniper Junos=17.1-r3

Juniper Junos=17.2

Juniper Junos=17.2-r1

Juniper Junos=17.2-r2

Juniper Junos=17.3

Juniper Junos=17.3-r1

Remediation

Information

The following software releases have been updated to resolve this specific issue: 12.1X46-D77, 12.3R12-S10,12.3X48-D60, 15.1R7, 15.1X49-D120, 15.1X53-D234, 15.1X53-D470, 15.1X53-D495, 15.1X53-D59, 15.1X53-D67, 16.1R6, 16.2R2-S6, 16.2R3, 17.1R2-S6, 17.1R3, 17.2R3, 17.3R2, 17.4R1 and all subsequent releases.

Event History

Oct 10, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0062?

CVE-2018-0062 is classified as a Denial of Service vulnerability.

How do I fix CVE-2018-0062?

To remediate CVE-2018-0062, users should upgrade to Junos OS version 12.1X46-D77 or later, or any other unaffected version.

Which versions of Junos OS are affected by CVE-2018-0062?

CVE-2018-0062 affects Junos OS versions 12.1X46 before 12.1X46-D77 and other specified versions.

Can CVE-2018-0062 be exploited remotely?

Yes, CVE-2018-0062 can be exploited by a remote unauthenticated user.

What impact does CVE-2018-0062 have on users?

CVE-2018-0062 may prevent users from authenticating or performing J-Web operations.