CVE-2018-0060 : An improper input validation weakness in the device control daemon process (dcd)

An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not vulnerable to this issue when not configured to use DHCP. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D40 on SRX Series; 12.3X48 versions prior to 12.3X48-D20 on SRX Series; 14.1X53 versions prior to 14.1X53-D40 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1X49 versions prior to 15.1X49-D20 on SRX Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D235 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D495 on NFX150, NFX250; 15.1X53 versions prior to 15.1X53-D590 on EX2300/EX3400; 15.1 versions prior to 15.1R7-S2.

Published 2018-10-10 18:29:03

Updated 2019-10-09 23:31:10

Source Juniper Networks, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2018-0060

Juniper » Junos » Version: 12.1x46
cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D10
cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D20
cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D15
cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.3x48
cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D25
cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D30
cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.3x48 Update D10
cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1
cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x49
cpe:2.3:o:juniper:junos:15.1x49:*:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 14.1x53
cpe:2.3:o:juniper:junos:14.1x53:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update R1
cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x49 Update D10
cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 14.1x53 Update D16
cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D10
cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D25
cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D26
cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 14.1x53 Update D15
cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D20
cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 14.1x53 Update D27
cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update F3
cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1 Update R2
cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 14.1x53 Update D30
cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update F2
cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.3x48 Update D15
cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D35
cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x53 Update D10
cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 12.1x46 Update D40
cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.1x46 Update D45
cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1 Update F4
cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1 Update R3
cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 14.1x53 Update D35
cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex3200 » Version: N/A
When used together with: Juniper » Ex4200 » Version: N/A
When used together with: Juniper » Ex4300 » Version: N/A
When used together with: Juniper » Ex4600 » Version: N/A
When used together with: Juniper » Ex6200 » Version: N/A
When used together with: Juniper » Qfx3500 » Version: N/A
When used together with: Juniper » Qfx3600 » Version: N/A
When used together with: Juniper » Qfx5100 » Version: N/A
Juniper » Junos » Version: 15.1 Update F5
cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 12.3x48 Update D20
cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x53 Update D34
cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D33
cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D32
cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D30
cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D21
cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D20
cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D50
cpe:2.3:o:juniper:junos:15.1x53:d50:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D51
cpe:2.3:o:juniper:junos:15.1x53:d51:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1 Update F6
cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x53 Update D52
cpe:2.3:o:juniper:junos:15.1x53:d52:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D55
cpe:2.3:o:juniper:junos:15.1x53:d55:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D60
cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D61
cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D62
cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D63
cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D210
cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx5110 » Version: N/A
When used together with: Juniper » Qfx5200 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D64
cpe:2.3:o:juniper:junos:15.1x53:d64:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D65
cpe:2.3:o:juniper:junos:15.1x53:d65:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D40
cpe:2.3:o:juniper:junos:15.1x53:d40:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Nfx Series » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D45
cpe:2.3:o:juniper:junos:15.1x53:d45:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Nfx Series » Version: N/A
Juniper » Junos » Version: 15.1 Update R6
cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x53
cpe:2.3:o:juniper:junos:15.1x53:*:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D57
cpe:2.3:o:juniper:junos:15.1x53:d57:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D230
cpe:2.3:o:juniper:junos:15.1x53:d230:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx5110 » Version: N/A
When used together with: Juniper » Qfx5200 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D110
cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*
Matching versions
Juniper » Junos » Version: 15.1x53 Update D231
cpe:2.3:o:juniper:junos:15.1x53:d231:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx5110 » Version: N/A
When used together with: Juniper » Qfx5200 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D232
cpe:2.3:o:juniper:junos:15.1x53:d232:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx5110 » Version: N/A
When used together with: Juniper » Qfx5200 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D58
cpe:2.3:o:juniper:junos:15.1x53:d58:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Ex2300 » Version: N/A
When used together with: Juniper » Ex3400 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D66
cpe:2.3:o:juniper:junos:15.1x53:d66:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Qfx10000 » Version: N/A
Juniper » Junos » Version: 15.1x53 Update D490
cpe:2.3:o:juniper:junos:15.1x53:d490:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Nfx Series » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-0060

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 38 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0060

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	Juniper Networks, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2018-0060

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-0060

http://www.securitytracker.com/id/1041858

Juniper Junos DHCP Processing Bug Lets Remote Users Deny Service - SecurityTracker
Third Party Advisory;VDB Entry
https://kb.juniper.net/JSA10895

Juniper Networks - 2018-10 Security Bulletin: Junos OS: Invalid IP/mask learned from DHCP server might cause the device control daemon (dcd) process crash (CVE-2018-0060)
Mitigation;Vendor Advisory

Jump to

Vulnerability Details : CVE-2018-0060

Products affected by CVE-2018-0060

Exploit prediction scoring system (EPSS) score for CVE-2018-0060

CVSS scores for CVE-2018-0060

CWE ids for CVE-2018-0060

References for CVE-2018-0060