CVE-2018-0027

Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service

High · published July 11, 2018

CVSS v3.0
7.5
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via that interface. This issue only affects Juniper Networks Junos OS 16.1 versions prior to 16.1R3. This issue does not affect Junos releases prior to 16.1R1.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02394 · 83.9th percentile
Published
2018-07-11T18:00Z
EPSS history
Timeline
  • 11 JUL 18:00Z
    Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service
    cvelistv5