製品・ソフトウェアに関する情報
Juniper Networks Junos OS におけるリソース管理に関する脆弱性
Title Juniper Networks Junos OS におけるリソース管理に関する脆弱性
Summary

Juniper Networks Junos OS には、リソース管理に関する脆弱性が存在します。

Possible impacts サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。

Publication Date Jan. 10, 2018, midnight
Registration Date March 5, 2018, 12:09 p.m.
Last Update March 5, 2018, 12:09 p.m.
CVSS3.0 : 警告
Score 5.3
Vector CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS2.0 : 注意
Score 2.9
Vector AV:A/AC:M/Au:N/C:N/I:N/A:P
Affected System
ジュニパーネットワークス
Junos OS 15.1R6-S2 未満の 15.1
Junos OS 15.1R7
Junos OS 16.1R5-S1 未満の 16.1
Junos OS 16.1R6
Junos OS 16.2R2-S2 未満の 16.2
Junos OS 16.2R3
Junos OS 17.1R2-S5 未満の 17.1
Junos OS 17.1R3
Junos OS 17.2R2 未満の 17.2
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
1 [2018年03月05日]
  掲載
March 5, 2018, 12:09 p.m.

NVD Vulnerability Information
CVE-2018-0006
Summary

A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon (bbe-smgd), and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number of pending VLAN authentication requests, leading to excessive memory allocation. This issue only affects devices configured for DHCPv4/v6 over AE auto-sensed VLANs, utilized in Broadband Edge (BBE) deployments. Other configurations are unaffected by this issue. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1R6-S2, 15.1R7; 16.1 versions prior to 16.1R5-S1, 16.1R6; 16.2 versions prior to 16.2R2-S2, 16.2R3; 17.1 versions prior to 17.1R2-S5, 17.1R3; 17.2 versions prior to 17.2R2.

Publication Date Jan. 11, 2018, 7:29 a.m.
Registration Date March 1, 2021, 6:35 p.m.
Last Update Nov. 21, 2024, 12:37 p.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:15.1:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List