CVE-2018-0055— Juniper Junos OS 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2018-0055の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message
ソース: NVD (National Vulnerability Database)
脆弱性説明
Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge (BBE) environment may result in a jdhcpd daemon crash. The daemon automatically restarts without intervention, but a continuous receipt of crafted DHCPv6 packets could leaded to an extended denial of service condition. This issue only affects Junos OS 15.1 and later. Earlier releases are unaffected by this issue. Devices are only vulnerable to the specially crafted DHCPv6 message if DHCP services are configured. Devices not configured to act as a DHCP server are not vulnerable to this issue. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S2; 15.1X49 versions prior to 15.1X49-D160; 15.1X53 versions prior to 15.1X53-D235, 15.1X53-D495; 16.1 versions prior to 16.1R4-S11, 16.1R6-S6, 16.1R7-S2; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S9; 17.2 versions prior to 17.2R2-S6; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R1-S5; 18.1 versions prior to 18.1R2-S3; 18.2 versions prior to 18.2R1-S2; 18.2X75 versions prior to 18.2X75-D20.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Juniper Junos OS 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Juniper Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件系统的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Junos OS中存在拒绝服务漏洞。攻击者可通过发送特制的DHCPv6消息利用该漏洞造成拒绝服务（jdhcpd守护进程崩溃）。以下版本受到影响：Juniper Junos OS 15.1版本，15.1X49版本，15.1X53版本，16.1版本，16.2版本，17.1版本，17.2版本，17.3版本，17.4版
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 15.1 ~ 15.1R7-S2 | - |
II. CVE-2018-0055の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2018-0055のインテリジェンス情報
お願いします ログイン より多くのインテリジェンス情報を見る
Same Patch Batch · Juniper Networks · 2018-10-10 · 21 CVEs total
| CVE-2018-0053 | vSRX Series: A local authentication vulnerability may lead to full control of a vSRX insta | |
| CVE-2018-0063 | Junos OS: Nexthop index allocation failed: private index space exhausted after incoming AR | |
| CVE-2018-0062 | Junos OS: Denial of Service in J-Web | |
| CVE-2018-0061 | Junos OS: Denial of service in telnetd | |
| CVE-2018-0060 | Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) | |
| CVE-2018-0059 | ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability | |
| CVE-2018-0058 | MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Deni | |
| CVE-2018-0057 | Junos OS: authd allows assignment of IP address requested by DHCP subscriber logging in wi | |
| CVE-2018-0056 | MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interface | |
| CVE-2018-0054 | QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames | |
| CVE-2018-0043 | Junos OS: RPD daemon crashes upon receipt of specific MPLS packet | |
| CVE-2018-0052 | Junos OS: Unauthenticated remote root access possible when RSH service is enabled | |
| CVE-2018-0051 | Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow d | |
| CVE-2018-0050 | Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD | |
| CVE-2018-0049 | Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel | |
| CVE-2018-0048 | Junos OS: Memory exhaustion denial of service vulnerability in Routing Protocols Daemon (R | |
| CVE-2018-0047 | Junos Space Security Director: XSS vulnerability in web administration | |
| CVE-2018-0046 | Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS | |
| CVE-2018-0045 | Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in | |
| CVE-2018-0044 | NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS |
IV. 関連脆弱性
同じ製品: Junos OS
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33781
Junos OS: EX Series, QFX Series: In a VXLAN scenario when sp
同じベンダー: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
V. CVE-2018-0055へのコメント
まだコメントはありません