PT-2022-6118 · Juniper Networks · Junos Evolved

Published 2022-10-12 · Updated 2022-10-21 · CVE-2022-22192

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 20.4R3-S4-EVO Juniper Networks Junos OS Evolved versions prior to 21.3R3-EVO Juniper Networks Junos OS Evolved versions prior to 21.4R3-EVO Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO

Description The issue is caused by an improper validation of syntactic correctness of input in the kernel of Juniper Networks Junos OS Evolved on PTX series devices, allowing a network-based, unauthenticated attacker to cause a Denial of Service (DoS). This can occur when an incoming TCP packet destined to the device is malformed, potentially leading to a kernel panic. Only TCP packets destined to the ports for BGP, LDP, and MSDP can trigger this issue. The affected devices are PTX10004, PTX10008, and PTX10016.

Recommendations For versions prior to 20.4R3-S4-EVO, update to 20.4R3-S4-EVO or later. For versions prior to 21.3R3-EVO, update to 21.3R3-EVO or later. For versions prior to 21.4R3-EVO, update to 21.4R3-EVO or later. For versions prior to 22.1R2-EVO, update to 22.1R2-EVO or later. As a temporary workaround, consider restricting access to the BGP, LDP, and MSDP ports to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-1286

CWE-20

Related Identifiers

BDU:2023-00058

CVE-2022-22192

Affected Products

Junos Evolved

References · 4

• https://bdu.fstec.ru/vul/2023-00058 · Security Note
• https://kb.juniper.net/JSA69915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22192 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22192 · Vendor Advisory