PT-2022-6104 · Juniper Networks · Junos+1
Published
2022-07-13
·
Updated
2022-07-29
·
CVE-2022-22214
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos OS versions prior to 12.3R12-S21
Juniper Networks Junos OS versions 15.1 prior to 15.1R7-S10
Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S12
Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S6
Juniper Networks Junos OS versions 18.4 prior to 18.4R2-S9, 18.4R3-S9
Juniper Networks Junos OS versions 19.1 prior to 19.1R2-S3, 19.1R3-S7
Juniper Networks Junos OS versions 19.2 prior to 19.2R1-S7, 19.2R3-S3
Juniper Networks Junos OS versions 19.3 prior to 19.3R2-S7, 19.3R3-S4
Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S5
Juniper Networks Junos OS versions 20.1 prior to 20.1R3
Juniper Networks Junos OS versions 20.2 prior to 20.2R3-S2
Juniper Networks Junos OS versions 20.3 prior to 20.3R3
Juniper Networks Junos OS versions 20.4 prior to 20.4R2-S2, 20.4R3
Juniper Networks Junos OS versions 21.1 prior to 21.1R2
Juniper Networks Junos OS Evolved versions prior to 20.4R3-S3-EVO
Juniper Networks Junos OS Evolved versions 21.2 prior to 21.2R3-EVO
Juniper Networks Junos OS Evolved versions 21.3 prior to 21.3R2-S1-EVO, 21.3R3-EVO
Juniper Networks Junos OS Evolved versions 21.4 prior to 21.4R2-EVO
Description
The issue is caused by an Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability allows an adjacent attacker to cause a PFE crash and thereby a Denial of Service (DoS) by sending a specific transit IPv6 packet over MPLS. The continued receipt of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect systems configured for IPv4 only.
Recommendations
For Juniper Networks Junos OS versions prior to 12.3R12-S21, update to version 12.3R12-S21 or later.
For Juniper Networks Junos OS versions 15.1 prior to 15.1R7-S10, update to version 15.1R7-S10 or later.
For Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S12, update to version 17.3R3-S12 or later.
For Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S6, update to version 18.3R3-S6 or later.
For Juniper Networks Junos OS versions 18.4 prior to 18.4R2-S9, 18.4R3-S9, update to version 18.4R2-S9, 18.4R3-S9 or later.
For Juniper Networks Junos OS versions 19.1 prior to 19.1R2-S3, 19.1R3-S7, update to version 19.1R2-S3, 19.1R3-S7 or later.
For Juniper Networks Junos OS versions 19.2 prior to 19.2R1-S7, 19.2R3-S3, update to version 19.2R1-S7, 19.2R3-S3 or later.
For Juniper Networks Junos OS versions 19.3 prior to 19.3R2-S7, 19.3R3-S4, update to version 19.3R2-S7, 19.3R3-S4 or later.
For Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S5, update to version 19.4R3-S5 or later.
For Juniper Networks Junos OS versions 20.1 prior to 20.1R3, update to version 20.1R3 or later.
For Juniper Networks Junos OS versions 20.2 prior to 20.2R3-S2, update to version 20.2R3-S2 or later.
For Juniper Networks Junos OS versions 20.3 prior to 20.3R3, update to version 20.3R3 or later.
For Juniper Networks Junos OS versions 20.4 prior to 20.4R2-S2, 20.4R3, update to version 20.4R2-S2, 20.4R3 or later.
For Juniper Networks Junos OS versions 21.1 prior to 21.1R2, update to version 21.1R2 or later.
For Juniper Networks Junos OS Evolved versions prior to 20.4R3-S3-EVO, update to version 20.4R3-S3-EVO or later.
For Juniper Networks Junos OS Evolved versions 21.2 prior to 21.2R3-EVO, update to version 21.2R3-EVO or later.
For Juniper Networks Junos OS Evolved versions 21.3 prior to 21.3R2-S1-EVO, 21.3R3-EVO, update to version 21.3R2-S1-EVO, 21.3R3-EVO or later.
For Juniper Networks Junos OS Evolved versions 21.4 prior to 21.4R2-EVO, update to version 21.4R2-EVO or later.
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos
Junos Evolved