CVE-2018-0020

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to other BGP peers. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D130 on SRX; 15.1X53 versions prior to 15.1X53-D66 on QFX10K; 15.1X53 versions prior to 15.1X53-D58 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S3, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D47; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R2-S3, 17.1R3; 17.2 versions prior to 17.2R1-S3, 17.2R2-S1, 17.2R3; 17.2X75 versions prior to 17.2X75-D70; 13.2 versions above and including 13.2R1. Versions prior to 13.2R1 are not affected. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue.

• CWE-20

• http://www.securitytracker.com/id/1040788Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10848Vendor Advisory
• http://www.securitytracker.com/id/1040788Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10848Vendor Advisory

Published

Apr 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0014Juniper Networks ScreenOS devices do not pad Ethernet packet…4.3
• CVE-2018-0015A malicious user with unrestricted access to the AppFormix a…9.8
• CVE-2018-0016Receipt of a specially crafted Connectionless Network Protoc…9.8
• CVE-2018-0017A vulnerability in the Network Address Translation - Protoco…7.5
• CVE-2018-0018On SRX Series devices during compilation of IDP policies, an…7.5
• CVE-2018-0019A vulnerability in Junos OS SNMP MIB-II subagent daemon (mib…5.3
• CVE-2018-0021If all 64 digits of the connectivity association name (CKN) …8.8
• CVE-2018-0022A Junos device with VPLS routing-instances configured on one…7.5
• CVE-2018-0023JSNAPy is an open source python version of Junos Snapshot Ad…5.5
• CVE-2018-0024An Improper Privilege Management vulnerability in a shell se…7.8
• CVE-2018-0025When an SRX Series device is configured to use HTTP/HTTPS pa…6.1
• CVE-2018-0026After Junos OS device reboot or upgrade, the stateless firew…4.7