PT-2022-6655 · Juniper Networks · Junos+1
Published
2022-10-12
·
Updated
2022-10-21
·
CVE-2022-22250
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos OS versions 17.3R1 through 19.2R3-S5
Juniper Networks Junos OS versions 19.3 through 19.3R3-S5
Juniper Networks Junos OS versions 19.4 through 19.4R2-S6
Juniper Networks Junos OS versions 19.4R3 through 19.4R3-S8
Juniper Networks Junos OS version 20.1R1 and later versions
Juniper Networks Junos OS versions 20.2 through 20.2R3-S4
Juniper Networks Junos OS versions 20.3 through 20.3R3-S3
Juniper Networks Junos OS versions 20.4 through 20.4R3-S3
Juniper Networks Junos OS versions 21.1 through 21.1R3-S1
Juniper Networks Junos OS versions 21.2 through 21.2R3
Juniper Networks Junos OS versions 21.3 through 21.3R2
Juniper Networks Junos OS versions 21.4 through 21.4R1-S1
Juniper Networks Junos OS versions 21.4R2
Juniper Networks Junos OS Evolved versions prior to 20.4R3-S3-EVO
Juniper Networks Junos OS Evolved version 21.1R1-EVO and later versions
Juniper Networks Junos OS Evolved versions 21.2-EVO through 21.2R3-EVO
Juniper Networks Junos OS Evolved versions 21.3-EVO through 21.3R2-EVO
Juniper Networks Junos OS Evolved versions 21.4-EVO through 21.4R1-S1-EVO
Juniper Networks Junos OS Evolved versions 21.4R2-EVO
Description
The issue is related to an Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). In an EVPN-MPLS scenario, if a MAC is learned locally on an access interface but later a request to delete is received indicating that the MAC was learned remotely, this can lead to memory corruption, which can result in a line card crash and reload.
Recommendations
For Juniper Networks Junos OS versions 17.3R1 through 19.2R3-S5, update to version 19.2R3-S5 or later.
For Juniper Networks Junos OS versions 19.3 through 19.3R3-S5, update to version 19.3R3-S5 or later.
For Juniper Networks Junos OS versions 19.4 through 19.4R2-S6, update to version 19.4R2-S6 or later.
For Juniper Networks Junos OS versions 19.4R3 through 19.4R3-S8, update to version 19.4R3-S8 or later.
For Juniper Networks Junos OS version 20.1R1 and later versions, update to a version that is not affected.
For Juniper Networks Junos OS versions 20.2 through 20.2R3-S4, update to version 20.2R3-S4 or later.
For Juniper Networks Junos OS versions 20.3 through 20.3R3-S3, update to version 20.3R3-S3 or later.
For Juniper Networks Junos OS versions 20.4 through 20.4R3-S3, update to version 20.4R3-S3 or later.
For Juniper Networks Junos OS versions 21.1 through 21.1R3-S1, update to version 21.1R3-S1 or later.
For Juniper Networks Junos OS versions 21.2 through 21.2R3, update to version 21.2R3 or later.
For Juniper Networks Junos OS versions 21.3 through 21.3R2, update to version 21.3R2 or later.
For Juniper Networks Junos OS versions 21.4 through 21.4R1-S1, update to version 21.4R1-S1 or later.
For Juniper Networks Junos OS versions 21.4R2, update to a version that is not affected.
For Juniper Networks Junos OS Evolved versions prior to 20.4R3-S3-EVO, update to version 20.4R3-S3-EVO or later.
For Juniper Networks Junos OS Evolved version 21.1R1-EVO and later versions, update to a version that is not affected.
For Juniper Networks Junos OS Evolved versions 21.2-EVO through 21.2R3-EVO, update to version 21.2R3-EVO or later.
For Juniper Networks Junos OS Evolved versions 21.3-EVO through 21.3R2-EVO, update to version 21.3R2-EVO or later.
For Juniper Networks Junos OS Evolved versions 21.4-EVO through 21.4R1-S1-EVO, update to version 21.4R1-S1-EVO or later.
For Juniper Networks Junos OS Evolved versions 21.4R2-EVO, update to a version that is not affected.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos
Junos Evolved