Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2018-0061
PUBLISHED
More InfoOfficial Page
Assigner-juniper
Assigner Org ID-8cbe9d5a-a066-4c94-8978-4b15efeae968
View Known Exploited Vulnerability (KEV) details
Published At-10 Oct, 2018 | 18:00
Updated At-17 Sep, 2024 | 00:51
Rejected At-
▼CVE Numbering Authority (CNA)
Junos OS: Denial of service in telnetd

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system performance. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81 on SRX Series; 12.3 versions prior to 12.3R12-S11; 12.3X48 versions prior to 12.3X48-D80 on SRX Series; 15.1 versions prior to 15.1R7; 15.1X49 versions prior to 15.1X49-D150, 15.1X49-D160 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400 Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D235 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D495 on NFX Series; 16.1 versions prior to 16.1R4-S12, 16.1R6-S6, 16.1R7; 16.2 versions prior to 16.2R2-S7, 16.2R3; 17.1 versions prior to 17.1R2-S9, 17.1R3; 17.2 versions prior to 17.2R2-S6, 17.2R3; 17.2X75 versions prior to 17.2X75-D100; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.2X75 versions prior to 18.2X75-D5.

Affected Products
Vendor
Juniper Networks, Inc.Juniper Networks
Product
Junos OS
Platforms
  • SRX Series
Versions
Affected
  • From 12.1X46 before 12.1X46-D81 (custom)
  • From 12.3X48 before 12.3X48-D80 (custom)
  • From 15.1X49 before 15.1X49-D150, 15.1X49-D160 (custom)
Vendor
Juniper Networks, Inc.Juniper Networks
Product
Junos OS
Versions
Affected
  • From 12.3 before 12.3R12-S11 (custom)
  • From 15.1 before 15.1R7 (custom)
  • From 16.1 before 16.1R4-S12, 16.1R6-S6, 16.1R7 (custom)
  • From 16.2 before 16.2R2-S7, 16.2R3 (custom)
  • From 17.1 before 17.1R2-S9, 17.1R3 (custom)
  • From 17.2 before 17.2R2-S6, 17.2R3 (custom)
  • From 17.2X75 before 17.2X75-D100 (custom)
  • From 17.3 before 17.3R2-S4, 17.3R3 (custom)
  • From 17.4 before 17.4R1-S5, 17.4R2 (custom)
  • From 18.2X75 before 18.2X75-D5 (custom)
Vendor
Juniper Networks, Inc.Juniper Networks
Product
Junos OS
Platforms
  • EX2300/EX3400 Series
Versions
Affected
  • From 15.1X53 before 15.1X53-D59 (custom)
Vendor
Juniper Networks, Inc.Juniper Networks
Product
Junos OS
Platforms
  • QFX10K Series
Versions
Affected
  • From 15.1X53 before 15.1X53-D68 (custom)
Vendor
Juniper Networks, Inc.Juniper Networks
Product
Junos OS
Platforms
  • QFX5200/QFX5110 Series
Versions
Affected
  • From 15.1X53 before 15.1X53-D235 (custom)
Vendor
Juniper Networks, Inc.Juniper Networks
Product
Junos OS
Platforms
  • NFX Series
Versions
Affected
  • From 15.1X53 before 15.1X53-D495 (custom)
Problem Types
TypeCWE IDDescription
textN/Adenial of service
Type: text
CWE ID: N/A
Description: denial of service
Metrics
VersionBase scoreBase severityVector
3.05.3MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Version: 3.0
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

The following software releases have been updated to resolve this specific issue: 12.1X46-D81, 12.3R12-S11, 12.3R13, 12.3X48-D80, 15.1R7, 15.1X49-D150, 15.1X49-D160, 15.1X53-D235, 15.1X53-D495, 15.1X53-D59, 15.1X53-D68, 16.1R4-S12, 16.1R6-S6, 16.1R7, 16.2R2-S7, 16.2R3, 17.1R2-S9, 17.1R3, 17.2R2-S6, 17.2R3, 17.2X75-D100, 17.2X75-D110, 17.3R2-S4, 17.3R3, 17.4R1-S5, 17.4R2, 18.1R1, 18.1R2, 18.2R1, 18.2X75-D5, and all subsequent releases.

Configurations

This issue affects devices with telnet service enabled.

Workarounds

Disabling the telnet service will completely mitigate this issue.

Exploits

Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://kb.juniper.net/JSA10896
x_refsource_CONFIRM
http://www.securitytracker.com/id/1041859
vdb-entry
x_refsource_SECTRACK
Hyperlink: https://kb.juniper.net/JSA10896
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.securitytracker.com/id/1041859
Resource:
vdb-entry
x_refsource_SECTRACK
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://kb.juniper.net/JSA10896
x_refsource_CONFIRM
x_transferred
http://www.securitytracker.com/id/1041859
vdb-entry
x_refsource_SECTRACK
x_transferred
Hyperlink: https://kb.juniper.net/JSA10896
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.securitytracker.com/id/1041859
Resource:
vdb-entry
x_refsource_SECTRACK
x_transferred
Details not found