CVE-2018-0063

Junos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interface

Medium · published October 10, 2018

CVSS v3.0
6.5
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces (IRIs) next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existing entries cannot be cleared, leading to a sustained denial of service (DoS) condition. An indicator of compromise for this issue is the report of the following error message: %KERN-4: Nexthop index allocation failed: private index space exhausted This issue only affects the management interface, and does not impact regular transit traffic through the FPCs. This issue also only affects Junos OS 17.3R3. No prior versions of Junos OS are affected by this issue. Affected releases are Juniper Networks Junos OS: 17.3R3.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00637 · 49.9th percentile
Published
2018-10-10T18:00Z
EPSS history
Timeline
  • 10 OCT 18:00Z
    Junos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interface
    cvelistv5