258
VMScore

CVE-2018-0056

Published: 10/10/2018 Updated: 09/10/2019
CVSS v2 Base Score: 2.9 | Impact Score: 2.9 | Exploitability Score: 5.5
CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6
VMScore: 258
Vector: AV:A/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon (L2ALD) daemon might crash when attempting to delete the duplicate MAC address when the particular entry is not found in the internal MAC address table. This issue only occurs on MX Series devices with l2-backhaul VPN configured. No other products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 15.1 versions before 15.1R7-S1 on MX Series; 16.1 versions before 16.1R4-S12, 16.1R6-S6 on MX Series; 16.2 versions before 16.2R2-S7 on MX Series; 17.1 versions before 17.1R2-S9 on MX Series; 17.2 versions before 17.2R1-S7, 17.2R2-S6 on MX Series; 17.3 versions before 17.3R2-S4, 17.3R3-S1 on MX Series; 17.4 versions before 17.4R1-S5 on MX Series; 18.1 versions before 18.1R2 on MX Series.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 15.1

juniper junos 16.1

juniper junos 16.2

juniper junos 17.1

juniper junos 17.2

juniper junos 17.3

juniper junos 17.4

juniper junos 18.1