CVE-2018-0032

The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this advisory. Earlier releases are unaffected by this vulnerability. This crafted BGP UPDATE does not propagate to other BGP peers. Affected releases are Juniper Networks Junos OS: 16.1X65 versions prior to 16.1X65-D47; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.

• CWE-20

• http://www.securitytracker.com/id/1041337Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10866Vendor Advisory
• http://www.securitytracker.com/id/1041337Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10866Vendor Advisory

Published

Jul 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0025When an SRX Series device is configured to use HTTP/HTTPS pa…6.1
• CVE-2018-0026After Junos OS device reboot or upgrade, the stateless firew…4.7
• CVE-2018-0027Receipt of a crafted or malformed RSVP PATH message may caus…7.5
• CVE-2018-0029While experiencing a broadcast storm, placing the fxp0 inter…5.7
• CVE-2018-0030Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FP…7.5
• CVE-2018-0031Receipt of specially crafted UDP/IP packets over MPLS may be…5.3
• CVE-2018-0034A Denial of Service vulnerability exists in the Juniper Netw…5.3
• CVE-2018-0035QFX5200 and QFX10002 devices that have been shipped with Jun…4.4
• CVE-2018-0037Junos OS routing protocol daemon (RPD) process may crash and…9.8
• CVE-2018-0038Juniper Networks Contrail Service Orchestration releases pri…
• CVE-2018-0039Juniper Networks Contrail Service Orchestration releases pri…6.5
• CVE-2018-0040Juniper Networks Contrail Service Orchestrator versions prio…9.8