← Back

CVE-2022-22238

nvd nist
Published: Oct 18, 2022Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When an incoming RESV message corresponding to a protected LSP is malformed it causes an incorrect internal state resulting in an rpd core. This issue affects: Juniper Networks Junos OS All versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S8; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R3; 21.3 versions prior to 21.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.2R3-S3-EVO; 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S1-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO version 21.2R1-EVO and later versions; 21.3-EVO versions prior to 21.3R2-EVO.

Affected (147)

2 products
Junos
Junos Os Evolved
Configuration A
111 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Before 19.2
Version 19.2
Version 19.2 r1-s1
Version 19.2 r1-s2
Version 19.2 r1-s3
Version 19.2 r1-s4
Version 19.2 r1-s5
Version 19.2 r1-s6
Version 19.2 r1-s7
Version 19.2 r1-s8
Version 19.2 r1-s9
Version 19.2 r1
Version 19.2 r2-s1
Version 19.2 r2
Version 19.2 r3-s1
Version 19.2 r3-s2
Version 19.2 r3-s3
Version 19.2 r3-s4
Version 19.2 r3-s5
Version 19.2 r3
Version 19.3
Version 19.3 r1-s1
Version 19.3 r1
Version 19.3 r2-s1
Version 19.3 r2-s2
Version 19.3 r2-s3
Version 19.3 r2-s4
Version 19.3 r2-s5
Version 19.3 r2-s6
Version 19.3 r2
Version 19.3 r3-s1
Version 19.3 r3-s2
Version 19.3 r3-s3
Version 19.3 r3-s4
Version 19.3 r3-s5
Version 19.3 r3
Version 19.4
Version 19.4 r1-s1
Version 19.4 r1-s2
Version 19.4 r1-s3
Version 19.4 r1-s4
Version 19.4 r1
Version 19.4 r2-s1
Version 19.4 r2-s2
Version 19.4 r2-s3
Version 19.4 r2-s4
Version 19.4 r2-s5
Version 19.4 r2-s6
Version 19.4 r2
Version 19.4 r3-s1
Version 19.4 r3-s2
Version 19.4 r3-s3
Version 19.4 r3-s4
Version 19.4 r3-s5
Version 19.4 r3-s6
Version 19.4 r3-s7
Version 19.4 r3
Version 20.1
Version 20.1 r1-s1
Version 20.1 r1-s2
Version 20.1 r1-s3
Version 20.1 r1-s4
Version 20.1 r1
Version 20.1 r2-s1
Version 20.1 r2-s2
Version 20.1 r2
Version 20.1 r3-s1
Version 20.1 r3
Version 20.2
Version 20.2 r1-s1
Version 20.2 r1-s2
Version 20.2 r1-s3
Version 20.2 r1
Version 20.2 r2-s1
Version 20.2 r2-s2
Version 20.2 r2-s3
Version 20.2 r2
Version 20.2 r3-s1
Version 20.2 r3-s2
Version 20.2 r3
Version 20.3
Version 20.3 r1-s1
Version 20.3 r1-s2
Version 20.3 r1
Version 20.3 r2-s1
Version 20.3 r2
Version 20.3 r3-s1
Version 20.3 r3
Version 20.4
Version 20.4 r1-s1
Version 20.4 r1
Version 20.4 r2-s1
Version 20.4 r2-s2
Version 20.4 r2
Version 20.4 r3
Version 21.1
Version 21.1 r1-s1
Version 21.1 r1
Version 21.1 r2-s1
Version 21.1 r2-s2
Version 21.1 r2
Version 21.2
Version 21.2 r1-s1
Version 21.2 r1-s2
Version 21.2 r1
Version 21.2 r2-s1
Version 21.2 r2
Version 21.3
Version 21.3 r1-s1
Version 21.3 r1-s2
Version 21.3 r1
Configuration B
36 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Before 20.2
Version 20.2
Version 20.2 r1-s1
Version 20.2 r1
Version 20.2 r2-s1
Version 20.2 r2
Version 20.2 r3
Version 20.3 r1-s1
Version 20.3 r1-s2
Version 20.3 r1-s3
Version 20.3 r1
Version 20.3 r2
Version 20.4
Version 20.4 r1-s1
Version 20.4 r1-s2
Version 20.4 r1
Version 20.4 r2-s1
Version 20.4 r2-s2
Version 20.4 r2-s3
Version 20.4 r2
Version 20.4 r3
Version 21.1 r1-s1
Version 21.1 r1
Version 21.1 r2
Version 21.1 r3-s1
Version 21.1 r3
Version 21.2 r1-s1
Version 21.2 r1-s2
Version 21.2 r1
Version 21.2 r2-s1
Version 21.2 r2-s2
Version 21.2 r2
Version 21.2 r3
Version 21.3
Version 21.3 r1-s1
Version 21.3 r1

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.