CVE-2018-0034— Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-0034
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core
Source: NVD (National Vulnerability Database)
Vulnerability Description
A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing using the JDHCPD daemon. This issue does not affect IPv4 DHCP packet processing. Affected releases are Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S10 on EX Series; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200; 15.1X53 versions prior to 15.1X53-D471 on NFX 150, NFX 250; 16.1 versions prior to 16.1R3-S9, 16.1R4-S8, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Juniper Junos OS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Junos OS中的JDHCPD守护进程存在拒绝服务。攻击者可通过向系统发送特制的IPv6数据包利用该漏洞造成拒绝服务。以下版本受到影响：Juniper Junos OS 12.3版本（在EX系列上），12.3X48版本（在SRX系列上），14.1X53版本（在EX2200/VC、EX3200、EX3300/V
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 12.3X48 ~ 12.3X48-D70 | - | |
| Juniper Networks | Junos OS | 14.1X53 ~ 14.1X53-D47 | - | |
| Juniper Networks | Junos OS | 14.1X53 ~ 14.1X53-D130 | - | |
| Juniper Networks | Junos OS | 15.1 ~ 15.1R4-S9, 15.1R6-S6, 15.1R7 | - | |
| Juniper Networks | Junos OS | 15.1X53 ~ 15.1X53-D233 | - | |
| Juniper Networks | Junos OS | 15.1X53 ~ 15.1X53-D471 | - | |
| Juniper Networks | Junos OS | 15.1X53 ~ 15.1X53-D67 | - | |
| Juniper Networks | Junos OS | 12.3 ~ 12.3R12-S10 | - |
II. Public POCs for CVE-2018-0034
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-0034
请登录查看更多情报信息。
- https://apps.juniper.net/feature-explorer/search.html#q=dhcpx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2018-0034
Same Patch Batch · Juniper Networks · 2018-07-11 · 14 CVEs total
| CVE-2018-0024 | Junos OS: A privilege escalation vulnerability exists where authenticated users with shell | |
| CVE-2018-0025 | Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through | |
| CVE-2018-0026 | Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgr | |
| CVE-2018-0027 | Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service | |
| CVE-2018-0029 | Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic int | |
| CVE-2018-0030 | Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt | |
| CVE-2018-0031 | Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firew | |
| CVE-2018-0032 | Junos OS: RPD crash when receiving a crafted BGP UPDATE | |
| CVE-2018-0035 | Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos O | |
| CVE-2018-0037 | Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages | |
| CVE-2018-0039 | Contrail Service Orchestration: Hardcoded credentials for Grafana service | |
| CVE-2018-0040 | Contrail Service Orchestration: hardcoded cryptographic certificates and keys | |
| CVE-2018-0041 | Contrail Service Orchestration: Hardcoded credentials for Keystone service. |
IV. Related Vulnerabilities
Same product: Junos OS
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33781
Junos OS: EX Series, QFX Series: In a VXLAN scenario when sp
Same vendor: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
V. Comments for CVE-2018-0034
No comments yet