CVE-2018-0061

Summary

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system performance. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81 on SRX Series; 12.3 versions prior to 12.3R12-S11; 12.3X48 versions prior to 12.3X48-D80 on SRX Series; 15.1 versions prior to 15.1R7; 15.1X49 versions prior to 15.1X49-D150, 15.1X49-D160 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D235 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D495 on NFX Series; 16.1 versions prior to 16.1R4-S12, 16.1R6-S6, 16.1R7; 16.2 versions prior to 16.2R2-S7, 16.2R3; 17.1 versions prior to 17.1R2-S9, 17.1R3; 17.2 versions prior to 17.2R2-S6, 17.2R3; 17.2X75 versions prior to 17.2X75-D100; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.2X75 versions prior to 18.2X75-D5.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS12.1X46 < 12.1X46-D81affected
Juniper NetworksJunos OS12.3X48 < 12.3X48-D80affected
Juniper NetworksJunos OS15.1X49 < 15.1X49-D150, 15.1X49-D160affected
Juniper NetworksJunos OS12.3 < 12.3R12-S11affected
Juniper NetworksJunos OS15.1 < 15.1R7affected
Juniper NetworksJunos OS16.1 < 16.1R4-S12, 16.1R6-S6, 16.1R7affected
Juniper NetworksJunos OS16.2 < 16.2R2-S7, 16.2R3affected
Juniper NetworksJunos OS17.1 < 17.1R2-S9, 17.1R3affected
Juniper NetworksJunos OS17.2 < 17.2R2-S6, 17.2R3affected
Juniper NetworksJunos OS17.2X75 < 17.2X75-D100affected
Juniper NetworksJunos OS17.3 < 17.3R2-S4, 17.3R3affected
Juniper NetworksJunos OS17.4 < 17.4R1-S5, 17.4R2affected
Juniper NetworksJunos OS18.2X75 < 18.2X75-D5affected
Juniper NetworksJunos OS15.1X53 < 15.1X53-D59affected
Juniper NetworksJunos OS15.1X53 < 15.1X53-D68affected
Juniper NetworksJunos OS15.1X53 < 15.1X53-D235affected
Juniper NetworksJunos OS15.1X53 < 15.1X53-D495affected

Weaknesses

  • denial of service

Workarounds

Disabling the telnet service will completely mitigate this issue.

ADP Enrichment

CVE Program Container

Additional References

References