PT-2022-6678 · Juniper Networks · Junos+1
Published
2022-10-12
·
Updated
2022-10-21
·
CVE-2022-22230
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos OS versions prior to 19.2R3-S6
Juniper Networks Junos OS versions 19.3R2 and later versions
Juniper Networks Junos OS versions prior to 19.4R2-S8, 19.4R3-S9
Juniper Networks Junos OS version 20.1R1 and later versions
Juniper Networks Junos OS versions prior to 20.2R3-S5
Juniper Networks Junos OS versions prior to 20.3R3-S5
Juniper Networks Junos OS versions prior to 20.4R3-S4
Juniper Networks Junos OS versions prior to 21.1R3-S2
Juniper Networks Junos OS versions prior to 21.2R3-S1
Juniper Networks Junos OS versions prior to 21.3R3-S2
Juniper Networks Junos OS versions prior to 21.4R2
Juniper Networks Junos OS Evolved versions prior to 20.4R3-S5-EVO
Juniper Networks Junos OS Evolved versions prior to 21.1R3-S2-EVO
Juniper Networks Junos OS Evolved versions prior to 21.2R3-S1-EVO
Juniper Networks Junos OS Evolved versions prior to 21.3R3-S2-EVO
Juniper Networks Junos OS Evolved versions prior to 21.4R2-EVO
Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO
Juniper Networks Junos OS Evolved versions prior to 22.2R2-EVO
Description
The issue is related to insufficient input validation in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This can allow an adjacent unauthenticated attacker to cause a Denial of Service (DoS). Specifically, if another router generates more than one specific valid OSPFv3 LSA, then rpd will crash while processing these LSAs. This issue only affects systems configured with OSPFv3.
Recommendations
For Juniper Networks Junos OS versions prior to 19.2R3-S6, update to version 19.2R3-S6 or later.
For Juniper Networks Junos OS versions 19.3R2 and later versions, update to a version that is not affected.
For Juniper Networks Junos OS versions prior to 19.4R2-S8, 19.4R3-S9, update to version 19.4R2-S8, 19.4R3-S9 or later.
For Juniper Networks Junos OS version 20.1R1 and later versions, update to a version that is not affected.
For Juniper Networks Junos OS versions prior to 20.2R3-S5, update to version 20.2R3-S5 or later.
For Juniper Networks Junos OS versions prior to 20.3R3-S5, update to version 20.3R3-S5 or later.
For Juniper Networks Junos OS versions prior to 20.4R3-S4, update to version 20.4R3-S4 or later.
For Juniper Networks Junos OS versions prior to 21.1R3-S2, update to version 21.1R3-S2 or later.
For Juniper Networks Junos OS versions prior to 21.2R3-S1, update to version 21.2R3-S1 or later.
For Juniper Networks Junos OS versions prior to 21.3R3-S2, update to version 21.3R3-S2 or later.
For Juniper Networks Junos OS versions prior to 21.4R2, update to version 21.4R2 or later.
For Juniper Networks Junos OS Evolved versions prior to 20.4R3-S5-EVO, update to version 20.4R3-S5-EVO or later.
For Juniper Networks Junos OS Evolved versions prior to 21.1R3-S2-EVO, update to version 21.1R3-S2-EVO or later.
For Juniper Networks Junos OS Evolved versions prior to 21.2R3-S1-EVO, update to version 21.2R3-S1-EVO or later.
For Juniper Networks Junos OS Evolved versions prior to 21.3R3-S2-EVO, update to version 21.3R3-S2-EVO or later.
For Juniper Networks Junos OS Evolved versions prior to 21.4R2-EVO, update to version 21.4R2-EVO or later.
For Juniper Networks Junos OS Evolved versions prior to 22.1R2-EVO, update to version 22.1R2-EVO or later.
For Juniper Networks Junos OS Evolved versions prior to 22.2R2-EVO, update to version 22.2R2-EVO or later.
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos
Junos Evolved