PT-2022-2359 · Juniper Networks · Junos+1

Published 2022-01-12 · Updated 2022-02-01 · CVE-2022-22169

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1R7-S11 Junos OS versions 18.3 prior to 18.3R3-S6 Junos OS versions 18.4 prior to 18.4R2-S9, 18.4R3-S10 Junos OS versions 19.1 prior to 19.1R2-S3, 19.1R3-S7 Junos OS versions 19.2 prior to 19.2R1-S7, 19.2R3-S4 Junos OS versions 19.3 prior to 19.3R2-S7, 19.3R3-S4 Junos OS versions 19.4 prior to 19.4R3-S6 Junos OS versions 20.1 prior to 20.1R3-S1 Junos OS versions 20.2 prior to 20.2R3-S3 Junos OS versions 20.3 prior to 20.3R3-S1 Junos OS versions 20.4 prior to 20.4R2-S2, 20.4R3 Junos OS versions 21.1 prior to 21.1R3 Junos OS versions 21.2 prior to 21.2R1-S1, 21.2R2 Junos OS Evolved versions prior to 21.2R2-EVO

Description The issue is related to an improper initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability can be exploited by an attacker who sends specific packets in certain orders and at specific timings, causing the OSPFv3 to unexpectedly enter graceful-restart (GR helper mode) and resulting in a Denial of Service (DoS). The OSPFv3 neighbor adjacency may become stuck in the "INIT" state. Log file messages can indicate compromise when traceoptions for OSPFv3 are enabled.

Recommendations For Junos OS versions prior to 15.1R7-S11, update to 15.1R7-S11 or later. For Junos OS versions 18.3 prior to 18.3R3-S6, update to 18.3R3-S6 or later. For Junos OS versions 18.4 prior to 18.4R2-S9, 18.4R3-S10, update to 18.4R2-S9, 18.4R3-S10 or later. For Junos OS versions 19.1 prior to 19.1R2-S3, 19.1R3-S7, update to 19.1R2-S3, 19.1R3-S7 or later. For Junos OS versions 19.2 prior to 19.2R1-S7, 19.2R3-S4, update to 19.2R1-S7, 19.2R3-S4 or later. For Junos OS versions 19.3 prior to 19.3R2-S7, 19.3R3-S4, update to 19.3R2-S7, 19.3R3-S4 or later. For Junos OS versions 19.4 prior to 19.4R3-S6, update to 19.4R3-S6 or later. For Junos OS versions 20.1 prior to 20.1R3-S1, update to 20.1R3-S1 or later. For Junos OS versions 20.2 prior to 20.2R3-S3, update to 20.2R3-S3 or later. For Junos OS versions 20.3 prior to 20.3R3-S1, update to 20.3R3-S1 or later. For Junos OS versions 20.4 prior to 20.4R2-S2, 20.4R3, update to 20.4R2-S2, 20.4R3 or later. For Junos OS versions 21.1 prior to 21.1R3, update to 21.1R3 or later. For Junos OS versions 21.2 prior to 21.2R1-S1, 21.2R2, update to 21.2R1-S1, 21.2R2 or later. For Junos OS Evolved versions prior to 21.2R2-EVO, update to 21.2R2-EVO or later.

Fix

DoS

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2022-02673

CVE-2022-22169

Affected Products

Junos

Junos Evolved

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-22169 · Security Note
• https://bdu.fstec.ru/vul/2022-02673 · Security Note
• https://kb.juniper.net/JSA11276 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22169 · Vendor Advisory
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11276&cat=SIRT_1&actp=LIST · Note
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11276&cat=SIRT_1&actp=LIST · Note