CVE-2022-22175 - Vulnerability Details

Vendors	Products
Juniper	Junos Mx10 Mx10000 Mx10003 Mx10008 Mx10016 Mx104 Mx150 Mx2008 Mx2010 Mx2020 Mx204 Mx240 Mx40 Mx480 Mx5 Mx80 Mx960 Srx100 Srx110 Srx1400 Srx1500 Srx210 Srx220 Srx240 Srx240h2 Srx300 Srx320 Srx340 Srx3400 Srx345 Srx3600 Srx380 Srx4000 Srx4100 Srx4200 Srx4600 Srx5000 Srx5400 Srx550 Srx550 Hm Srx550m Srx5600 Srx5800 Srx650

Link	Providers
https://kb.juniper.net/JSA11281

Show plain JSON

{"containers": {"cna": {"affected": [{"platforms": ["MX Series, SRX Series"], "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "20.4R1", "status": "unaffected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "20.4R3-S1", "status": "affected", "version": "20.4", "versionType": "custom"}, {"lessThan": "21.1R2-S2, 21.1R3", "status": "affected", "version": "21.1", "versionType": "custom"}, {"lessThan": "21.2R1-S2, 21.2R2", "status": "affected", "version": "21.2", "versionType": "custom"}, {"lessThan": "21.3R1-S1, 21.3R2", "status": "affected", "version": "21.3", "versionType": "custom"}]}], "configurations": [{"lang": "en", "value": "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with:\n\n  user@host> show security alg status | match sip\n    SIP      : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [ ... services alg sip ]"}], "datePublic": "2022-01-12T00:00:00", "descriptions": [{"lang": "en", "value": "An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-667", "description": "CWE-667 Improper Locking", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"description": "Denial of Service (DoS)", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-01-19T00:21:24", "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kb.juniper.net/JSA11281"}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 20.4R3-S1, 21.1R2-S2, 21.1R3, 21.2R1-S2, 21.2R2, 21.3R1-S1, 21.3R2, 21.4R1, and all subsequent releases."}], "source": {"advisory": "JSA11281", "defect": ["1604123"], "discovery": "USER"}, "title": "Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed", "workarounds": [{"lang": "en", "value": "There are no viable workarounds for this issue."}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "sirt@juniper.net", "DATE_PUBLIC": "2022-01-12T17:00:00.000Z", "ID": "CVE-2022-22175", "STATE": "PUBLIC", "TITLE": "Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Junos OS", "version": {"version_data": [{"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "20.4", "version_value": "20.4R3-S1"}, {"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "21.1", "version_value": "21.1R2-S2, 21.1R3"}, {"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "21.2", "version_value": "21.2R1-S2, 21.2R2"}, {"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "21.3", "version_value": "21.3R1-S1, 21.3R2"}, {"platform": "MX Series, SRX Series", "version_affected": "!<", "version_value": "20.4R1"}]}}]}, "vendor_name": "Juniper Networks"}]}}, "configuration": [{"lang": "en", "value": "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with:\n\n  user@host> show security alg status | match sip\n    SIP      : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [ ... services alg sip ]"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."}]}, "exploit": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-667 Improper Locking"}]}, {"description": [{"lang": "eng", "value": "Denial of Service (DoS)"}]}]}, "references": {"reference_data": [{"name": "https://kb.juniper.net/JSA11281", "refsource": "CONFIRM", "url": "https://kb.juniper.net/JSA11281"}]}, "solution": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 20.4R3-S1, 21.1R2-S2, 21.1R3, 21.2R1-S2, 21.2R2, 21.3R1-S1, 21.3R2, 21.4R1, and all subsequent releases."}], "source": {"advisory": "JSA11281", "defect": ["1604123"], "discovery": "USER"}, "work_around": [{"lang": "en", "value": "There are no viable workarounds for this issue."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T03:07:49.855Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.juniper.net/JSA11281"}]}]}, "cveMetadata": {"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "assignerShortName": "juniper", "cveId": "CVE-2022-22175", "datePublished": "2022-01-19T00:21:24.193997Z", "dateReserved": "2021-12-21T00:00:00", "dateUpdated": "2024-09-16T20:02:47.465Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

platforms : [ »

0 : MX Series, SRX Series (string)

]

product : Junos OS (string)

vendor : Juniper Networks (string)

versions : [ »

0 : { »

lessThan : 20.4R1 (string)

status : unaffected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : 20.4R3-S1 (string)

status : affected (string)

version : 20.4 (string)

versionType : custom (string)

}

2 : { »

lessThan : 21.1R2-S2, 21.1R3 (string)

status : affected (string)

version : 21.1 (string)

versionType : custom (string)

}

3 : { »

lessThan : 21.2R1-S2, 21.2R2 (string)

status : affected (string)

version : 21.2 (string)

versionType : custom (string)

}

4 : { »

lessThan : 21.3R1-S1, 21.3R2 (string)

status : affected (string)

version : 21.3 (string)

versionType : custom (string)

}

]

}

]

configurations : [ »

0 : { »

lang : en (string)

value : To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with: user@host> show security alg status | match sip SIP : Enabled Please verify on MX whether the following is configured: [ ... services alg sip ] (string)

}

]

datePublic : 2022-01-12T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-667 (string)

description : CWE-667 Improper Locking (string)

lang : en (string)

type : CWE (string)

}

]

}

1 : { »

descriptions : [ »

0 : { »

description : Denial of Service (DoS) (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-01-19T00:21:24 (string)

orgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

shortName : juniper (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kb.juniper.net/JSA11281 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 20.4R3-S1, 21.1R2-S2, 21.1R3, 21.2R1-S2, 21.2R2, 21.3R1-S1, 21.3R2, 21.4R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA11281 (string)

defect : [ »

0 : 1604123 (string)

]

discovery : USER (string)

}

title : Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed (string)

workarounds : [ »

0 : { »

lang : en (string)

value : There are no viable workarounds for this issue. (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : sirt@juniper.net (string)

DATE_PUBLIC : 2022-01-12T17:00:00.000Z (string)

ID : CVE-2022-22175 (string)

STATE : PUBLIC (string)

TITLE : Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Junos OS (string)

version : { »

version_data : [ »

0 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 20.4 (string)

version_value : 20.4R3-S1 (string)

}

1 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 21.1 (string)

version_value : 21.1R2-S2, 21.1R3 (string)

}

2 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 21.2 (string)

version_value : 21.2R1-S2, 21.2R2 (string)

}

3 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 21.3 (string)

version_value : 21.3R1-S1, 21.3R2 (string)

}

4 : { »

platform : MX Series, SRX Series (string)

version_affected : !< (string)

version_value : 20.4R1 (string)

}

]

}

]

}

vendor_name : Juniper Networks (string)

}

]

}

configuration : [ »

0 : { »

lang : en (string)

value : To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with: user@host> show security alg status | match sip SIP : Enabled Please verify on MX whether the following is configured: [ ... services alg sip ] (string)

}

]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (string)

}

]

}

exploit : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-667 Improper Locking (string)

}

]

}

1 : { »

description : [ »

0 : { »

lang : eng (string)

value : Denial of Service (DoS) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.juniper.net/JSA11281 (string)

refsource : CONFIRM (string)

url : https://kb.juniper.net/JSA11281 (string)

}

]

}

solution : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 20.4R3-S1, 21.1R2-S2, 21.1R3, 21.2R1-S2, 21.2R2, 21.3R1-S1, 21.3R2, 21.4R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA11281 (string)

defect : [ »

0 : 1604123 (string)

]

discovery : USER (string)

}

work_around : [ »

0 : { »

lang : en (string)

value : There are no viable workarounds for this issue. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T03:07:49.855Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kb.juniper.net/JSA11281 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

assignerShortName : juniper (string)

cveId : CVE-2022-22175 (string)

datePublished : 2022-01-19T00:21:24.193997Z (string)

dateReserved : 2021-12-21T00:00:00 (string)

dateUpdated : 2024-09-16T20:02:47.465Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*", "matchCriteriaId": "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "037BA01C-3F5C-4503-A633-71765E9EF774", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*", "matchCriteriaId": "C54B047C-4B38-40C0-9855-067DCF7E48BD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "38984199-E332-4A9C-A4C0-78083D052E15", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "AA6526FB-2941-4D18-9B2E-472AD5A62A53", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*", "matchCriteriaId": "09876787-A40A-4340-9C12-8628C325353B", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*", "matchCriteriaId": "625BA7E6-D2AD-4A48-9B94-24328BE5B06A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "F462F4E3-762C-429F-8D25-5521100DD37C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*", "matchCriteriaId": "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "689FE1AE-7A85-4FB6-AB02-E732F23581B6", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*", "matchCriteriaId": "A52AF794-B36B-43A6-82E9-628658624B0A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "3998DC76-F72F-4452-9150-652140B113EB", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*", "matchCriteriaId": "CC78A4CB-D617-43FC-BB51-287D2D0C44ED", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*", "matchCriteriaId": "52699E2B-450A-431C-81E3-DC4483C8B4F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*", "matchCriteriaId": "C39DA74D-F5C7-4C11-857D-50631A110644", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*", "matchCriteriaId": "F72C850A-0530-4DB7-A553-7E19F82122B5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FE2089C-F341-4DC1-B76D-633BC699306D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*", "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*", "matchCriteriaId": "00C7FC57-8ACF-45AA-A227-7E3B350FD24F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*", "matchCriteriaId": "2754C2DF-DF6E-4109-9463-38B4E0465B77", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*", "matchCriteriaId": "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*", "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B557965-0040-4048-B56C-F564FF28635B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB875EBD-A3CD-4466-B2A3-39D47FF94592", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E020556B-693F-4963-BA43-3164AB50FA49", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*", "matchCriteriaId": "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*", "matchCriteriaId": "06A03463-6B1D-4DBA-9E89-CAD5E899B98B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*", "matchCriteriaId": "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*", "matchCriteriaId": "52F0B735-8C49-4B08-950A-296C9CDE43CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."}, {"lang": "es", "value": "Una vulnerabilidad de bloqueo inapropiado en el SIP ALG de Juniper Networks Junos OS en las series MX y SRX permite a un atacante no autenticado en red causar un bloqueo del demonio de procesamiento de flujos (flowd) y, por tanto, una denegaci\u00f3n de servicio (DoS). La recepci\u00f3n continuada de estos paquetes espec\u00edficos causar\u00e1 una condici\u00f3n de denegaci\u00f3n de servicio sostenida. Este problema puede producirse en un escenario en el que la SIP ALG est\u00e9 habilitada y est\u00e9n proces\u00e1ndose simult\u00e1neamente mensajes SIP espec\u00edficos. Este problema afecta a: Juniper Networks Junos OS en las series MX y SRX versiones anteriores a 20.4R3-S1; versiones 21.1 anteriores a 21.1R2-S2, 21.1R3; versiones 21.2 anteriores a 21.2R1-S2, 21.2R2; versiones 21.3 anteriores a 21.3R1-S1, 21.3R2. Este problema no afecta a versiones del Sistema Operativo Junos de Juniper Networks anteriores a 20.4R1"}], "id": "CVE-2022-22175", "lastModified": "2024-11-21T06:46:19.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "sirt@juniper.net", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-01-19T01:15:09.393", "references": [{"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA11281"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA11281"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-667"}], "source": "sirt@juniper.net", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:* (string)

matchCriteriaId : 20DDC6B7-BFC4-4F0B-8E68-442C23765BF2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 037BA01C-3F5C-4503-A633-71765E9EF774 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:* (string)

matchCriteriaId : C54B047C-4B38-40C0-9855-067DCF7E48BD (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:* (string)

matchCriteriaId : 38984199-E332-4A9C-A4C0-78083D052E15 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:* (string)

matchCriteriaId : AA6526FB-2941-4D18-9B2E-472AD5A62A53 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:* (string)

matchCriteriaId : 09876787-A40A-4340-9C12-8628C325353B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : 625BA7E6-D2AD-4A48-9B94-24328BE5B06A (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : F462F4E3-762C-429F-8D25-5521100DD37C (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:* (string)

matchCriteriaId : C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:* (string)

matchCriteriaId : 689FE1AE-7A85-4FB6-AB02-E732F23581B6 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:* (string)

matchCriteriaId : A52AF794-B36B-43A6-82E9-628658624B0A (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 3998DC76-F72F-4452-9150-652140B113EB (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:* (string)

matchCriteriaId : CC78A4CB-D617-43FC-BB51-287D2D0C44ED (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52699E2B-450A-431C-81E3-DC4483C8B4F2 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D5627740-42E3-4FB1-B8B9-0B768AFFA1EC (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C39DA74D-F5C7-4C11-857D-50631A110644 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F72C850A-0530-4DB7-A553-7E19F82122B5 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FE2089C-F341-4DC1-B76D-633BC699306D (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 27175D9A-CA2C-4218-8042-835E25DFCA43 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 00C7FC57-8ACF-45AA-A227-7E3B350FD24F (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2754C2DF-DF6E-4109-9463-38B4E0465B77 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F4A26704-A6A4-4C4F-9E12-A0A0259491EF (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C982A2FF-A1F9-4830-BAB6-77CFCE1F093F (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 104858BD-D31D-40E0-8524-2EC311F10EAC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B557965-0040-4048-B56C-F564FF28635B (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EB875EBD-A3CD-4466-B2A3-39D47FF94592 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B5E08E1E-0FE4-4294-9497-BBFFECA2A220 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E020556B-693F-4963-BA43-3164AB50FA49 (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06A03463-6B1D-4DBA-9E89-CAD5E899B98B (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5ABA347C-3EF3-4F75-B4D1-54590A57C2BC (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52F0B735-8C49-4B08-950A-296C9CDE43CA (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

43 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de bloqueo inapropiado en el SIP ALG de Juniper Networks Junos OS en las series MX y SRX permite a un atacante no autenticado en red causar un bloqueo del demonio de procesamiento de flujos (flowd) y, por tanto, una denegación de servicio (DoS). La recepción continuada de estos paquetes específicos causará una condición de denegación de servicio sostenida. Este problema puede producirse en un escenario en el que la SIP ALG esté habilitada y estén procesándose simultáneamente mensajes SIP específicos. Este problema afecta a: Juniper Networks Junos OS en las series MX y SRX versiones anteriores a 20.4R3-S1; versiones 21.1 anteriores a 21.1R2-S2, 21.1R3; versiones 21.2 anteriores a 21.2R1-S2, 21.2R2; versiones 21.3 anteriores a 21.3R1-S1, 21.3R2. Este problema no afecta a versiones del Sistema Operativo Junos de Juniper Networks anteriores a 20.4R1 (string)

}

]

id : CVE-2022-22175 (string)

lastModified : 2024-11-21T06:46:19.223 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 4.3 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:M/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : sirt@juniper.net (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-01-19T01:15:09.393 (string)

references : [ »

0 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA11281 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA11281 (string)

}

]

sourceIdentifier : sirt@juniper.net (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-667 (string)

}

]

source : sirt@juniper.net (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object