PT-2022-3960 · Juniper Networks · Junos

Published

2022-07-13

·

Updated

2022-07-27

·

CVE-2022-22202

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.1R3-S9 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S6 Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S6 Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S8 Juniper Networks Junos OS 20.1 versions prior to 20.1R3-S4 Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S5 Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S4 Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S4 Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S2 Juniper Networks Junos OS 21.2 versions prior to 21.2R3-S1 Juniper Networks Junos OS 21.3 versions prior to 21.3R3 Juniper Networks Junos OS 21.4 versions prior to 21.4R2 Juniper Networks Junos OS 22.1 versions prior to 22.1R2
Description The issue is related to improper handling of exceptional conditions in Juniper Networks Junos OS on specific PTX Series devices. This can allow an unauthenticated attacker to cause a Denial of Service (DoS) by triggering the dcpfe process to crash and FPC to restart. The issue affects devices when processing specific MPLS packets received on an interface with multiple units configured, where at least one unit has 'family mpls' not configured.
Recommendations For Juniper Networks Junos OS versions prior to 19.1R3-S9, update to version 19.1R3-S9 or later. For Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S6, update to version 19.2R3-S6 or later. For Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S6, update to version 19.3R3-S6 or later. For Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S8, update to version 19.4R3-S8 or later. For Juniper Networks Junos OS 20.1 versions prior to 20.1R3-S4, update to version 20.1R3-S4 or later. For Juniper Networks Junos OS 20.2 versions prior to 20.2R3-S5, update to version 20.2R3-S5 or later. For Juniper Networks Junos OS 20.3 versions prior to 20.3R3-S4, update to version 20.3R3-S4 or later. For Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S4, update to version 20.4R3-S4 or later. For Juniper Networks Junos OS 21.1 versions prior to 21.1R3-S2, update to version 21.1R3-S2 or later. For Juniper Networks Junos OS 21.2 versions prior to 21.2R3-S1, update to version 21.2R3-S1 or later. For Juniper Networks Junos OS 21.3 versions prior to 21.3R3, update to version 21.3R3 or later. For Juniper Networks Junos OS 21.4 versions prior to 21.4R2, update to version 21.4R2 or later. For Juniper Networks Junos OS 22.1 versions prior to 22.1R2, update to version 22.1R2 or later.

Exploit

Fix

DoS

Improper Handling of Exceptional Conditions

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-755

Related Identifiers

BDU:2022-04792
CVE-2022-22202

Affected Products

Junos