CVE-2018-0037

Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. Due to design improvements, this issue does not affect Junos OS 16.1R1, and all subsequent releases. This issue only affects the receiving BGP device and is non-transitive in nature. Affected releases are Juniper Networks Junos OS: 15.1F5 versions starting from 15.1F5-S7 and all subsequent releases; 15.1F6 versions starting from 15.1F6-S3 and later releases prior to 15.1F6-S10; 15.1F7 versions 15.1 versions starting from 15.1R5 and later releases, including the Service Releases based on 15.1R5 and on 15.1R6 prior to 15.1R6-S6 and 15.1R7;

• CWE-20

• http://www.securitytracker.com/id/1041339Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10871Vendor Advisory
• http://www.securitytracker.com/id/1041339Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10871Vendor Advisory

Published

Jul 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0029While experiencing a broadcast storm, placing the fxp0 inter…5.7
• CVE-2018-0030Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FP…7.5
• CVE-2018-0031Receipt of specially crafted UDP/IP packets over MPLS may be…5.3
• CVE-2018-0032The receipt of a crafted BGP UPDATE can lead to a routing pr…7.5
• CVE-2018-0034A Denial of Service vulnerability exists in the Juniper Netw…5.3
• CVE-2018-0035QFX5200 and QFX10002 devices that have been shipped with Jun…4.4
• CVE-2018-0038Juniper Networks Contrail Service Orchestration releases pri…
• CVE-2018-0039Juniper Networks Contrail Service Orchestration releases pri…6.5
• CVE-2018-0040Juniper Networks Contrail Service Orchestrator versions prio…9.8
• CVE-2018-0041Juniper Networks Contrail Service Orchestration releases pri…9.8
• CVE-2018-0042Juniper Networks CSO versions prior to 4.0.0 may log passwor…
• CVE-2018-0043Receipt of a specific MPLS packet may cause the routing prot…8.8