CVE-2018-0005: Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-10 · updated 2026-06-17
Weakness: CWE-754

Description

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.

Affected products

Juniper Junos OS: 14.1x53, 14.1x53-d10, 14.1x53-d15, 14.1x53-d16, 14.1x53-d25, 14.1x53-d26 (+18)

References

http://www.securitytracker.com/id/1040182
https://kb.juniper.net/JSA10833
http://www.securitytracker.com/id/1040182
https://kb.juniper.net/JSA10833

Get alerted when CVE-2018-0005 or the next vulnerability affects your stack