← Back

CVE-2022-22206

nvd nist
Published: Jul 20, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search feature of UTM (Unified Threat management). Continued receipt of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 20.2 versions prior to 20.2R3-S4 on SRX Series; 20.3 versions prior to 20.3R3-S3 on SRX Series; 20.4 versions prior to 20.4R3-S3 on SRX Series; 21.1 versions prior to 21.1R3-S1 on SRX Series; 21.2 versions prior to 21.2R2-S2, 21.2R3 on SRX Series; 21.3 versions prior to 21.3R2 on SRX Series; 21.4 versions prior to 21.4R2 on SRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 20.2R1.

Affected (49)

Products: Juniper: Junos
1 product
Junos
Configuration A
49 vulnerable · 27 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 20.2 r1-s1
Version 20.2 r1-s2
Version 20.2 r1-s3
Version 20.2 r1
Version 20.2 r2-s1
Version 20.2 r2-s2
Version 20.2 r2-s3
Version 20.2 r2
Version 20.2 r3-s1
Version 20.2 r3-s2
Version 20.2 r3-s3
Version 20.2 r3
Version 20.3
Version 20.3 r1-s1
Version 20.3 r1-s2
Version 20.3 r1
Version 20.3 r2-s1
Version 20.3 r2
Version 20.3 r3-s1
Version 20.3 r3-s2
Version 20.3 r3
Version 20.4
Version 20.4 r1-s1
Version 20.4 r1
Version 20.4 r2-s1
Version 20.4 r2-s2
Version 20.4 r2
Version 20.4 r3-s1
Version 20.4 r3-s2
Version 20.4 r3
Version 21.1
Version 21.1 r1-s1
Version 21.1 r1
Version 21.1 r2-s1
Version 21.1 r2-s2
Version 21.1 r2
Version 21.1 r3
Version 21.2
Version 21.2 r1-s1
Version 21.2 r1-s2
Version 21.2 r1
Version 21.2 r2-s1
Version 21.2 r2
Version 21.3 r1-s1
Version 21.3 r1-s2
Version 21.3 r1
Version 21.4 r1-s1
Version 21.4 r1-s2
Version 21.4 r1
Running on/withPlatform Versions
Juniper
Srx100
All versions
Juniper
Srx110
All versions
Juniper
Srx1400
All versions
Juniper
Srx1500
All versions
Juniper
Srx210
All versions
Juniper
Srx220
All versions
Juniper
Srx240
All versions
Juniper
Srx240h2
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx3400
All versions
Juniper
Srx345
All versions
Juniper
Srx3600
All versions
Juniper
Srx380
All versions
Juniper
Srx4000
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx4600
All versions
Juniper
Srx5000
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx550 Hm
All versions
Juniper
Srx550m
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions
Juniper
Srx650
All versions

References (2)

Source: sirt@juniper.net
Mailing ListMitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListMitigationVendor Advisory

Timeline

No history available yet.