CVE-2018-0060 : What You Need to Know

A vulnerability in the device control daemon process (dcd) of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the dcd process and affect the interfaces and connected clients when the Junos device is requesting an IP address. This issue does not impact Junos devices that are not configured to use DHCP.

Understanding CVE-2018-0060

What is CVE-2018-0060?

This CVE refers to an improper input validation vulnerability in the device control daemon process (dcd) of Juniper Networks Junos OS, potentially leading to a Denial of Service (DoS) attack.

The Impact of CVE-2018-0060

The vulnerability can result in a DoS attack on the dcd process, affecting interfaces and connected clients when a Junos device requests an IP address.

Technical Details of CVE-2018-0060

Vulnerability Description

The vulnerability allows an attacker to disrupt the dcd process, impacting device interfaces and connected clients during IP address requests.

Affected Systems and Versions

Junos OS 12.1X46 versions before 12.1X46-D40 on SRX Series
Junos OS 12.3X48 versions before 12.3X48-D20 on SRX Series
Junos OS 14.1X53 versions before 14.1X53-D40 on various platforms
Junos OS 15.1X49 versions before 15.1X49-D20 on SRX Series
Junos OS 15.1X53 versions before 15.1X53-D68 on QFX10000 Series
Junos OS 15.1X53 versions before 15.1X53-D235 on QFX5200/QFX5110
Junos OS 15.1X53 versions before 15.1X53-D495 on NFX150, NFX250
Junos OS 15.1X53 versions before 15.1X53-D590 on EX2300/EX3400
Junos OS 15.1 versions before 15.1R7-S2

Exploitation Mechanism

The vulnerability can be exploited by sending malicious input to the dcd process, causing it to crash and disrupt device operations.

Mitigation and Prevention

Immediate Steps to Take

Configure devices to use static IP addresses for all interfaces
Disable DHCP services

Long-Term Security Practices

Regularly update Junos OS to the latest patched versions
Implement network segmentation and access controls

Patching and Updates

Ensure that the following software releases are applied to address the issue: 12.1X46-D40, 12.3X48-D20, 14.1X53-D40, 15.1X49-D20, 15.1X53-D68, 15.1X53-D235, 15.1X53-D495, 15.1X53-D590, 15.1R7-S2, 16.1R1, and all subsequent releases.