CVE-2018-0048

A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue only affects devices with JET support running Junos OS 17.2R1 and subsequent releases. Other versions of Junos OS are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.1 versions prior to 18.1R2-S3, 18.1R3;

• CWE-400
• CWE-400

• http://www.securityfocus.com/bid/105564Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041849Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10882Vendor Advisory
• http://www.securityfocus.com/bid/105564Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041849Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10882Vendor Advisory

Published

Oct 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0042Juniper Networks CSO versions prior to 4.0.0 may log passwor…
• CVE-2018-0043Receipt of a specific MPLS packet may cause the routing prot…8.8
• CVE-2018-0044An insecure SSHD configuration in Juniper Device Manager (JD…9.8
• CVE-2018-0045Receipt of a specific Draft-Rosen MVPN control packet may ca…8.8
• CVE-2018-0046A reflected cross-site scripting vulnerability in OpenNMS in…8.8
• CVE-2018-0047A persistent cross-site scripting vulnerability in the UI fr…8
• CVE-2018-0049A NULL Pointer Dereference vulnerability in Juniper Networks…7.5
• CVE-2018-0050An error handling vulnerability in Routing Protocols Daemon …7.5
• CVE-2018-0051A Denial of Service vulnerability in the SIP application lay…7.5
• CVE-2018-0052If RSH service is enabled on Junos OS and if the PAM authent…7.2
• CVE-2018-0053An authentication bypass vulnerability in the initial boot s…6.8
• CVE-2018-0054On QFX5000 Series and EX4600 switches, a high rate of Ethern…6.5