PT-2022-15286 · Juniper Networks · Junos

Published 2022-04-14 · Updated 2022-04-21 · CVE-2022-22188

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 20.2R1 through 20.2R2

Description An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service (DoS). The device must be configured with storm control profiling limiting the number of unknown broadcast, multicast, or unicast traffic to be vulnerable to this issue.

Recommendations For Juniper Networks Junos OS version 20.2R1, update to version 20.2R2 or later to resolve the issue. For versions prior to 20.2R2, consider disabling storm control profiling as a temporary workaround to minimize the risk of exploitation.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-789

CWE-122

Related Identifiers

CVE-2022-22188

Affected Products

Junos

References · 4

• 🔥 https://kb.juniper.net/JSA69497 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-22188 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22188 · Vendor Advisory
• https://t.me/cibsecurity/40792 · Telegram Post