Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-0027 Details

Description

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via that interface. This issue only affects Juniper Networks Junos OS 16.1 versions prior to 16.1R3. This issue does not affect Junos releases prior to 16.1R1.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://kb.juniper.net/JSA10861 CVEMitigationVendor Advisory
http://www.securityfocus.com/bid/104721 CVEThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041318 CVEThird Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10861 [email protected]MitigationVendor Advisory
http://www.securityfocus.com/bid/104721 [email protected]Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]

Affected Products

ProductVersions
juniper junos
16.1 r1
16.1 r2

CPE

  • cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*
  • cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2018-0027
NVD Published Date:
Jul 11, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-0027 Details - Not Deferred