CVE-2022-22178 - Vulnerability Details

Vendors	Products
Juniper	Junos Mx10 Mx10000 Mx10003 Mx10008 Mx10016 Mx104 Mx150 Mx2008 Mx2010 Mx2020 Mx204 Mx240 Mx40 Mx480 Mx5 Mx80 Mx960 Srx100 Srx110 Srx1400 Srx1500 Srx210 Srx220 Srx240 Srx240h2 Srx300 Srx320 Srx340 Srx3400 Srx345 Srx3600 Srx380 Srx4000 Srx4100 Srx4200 Srx4600 Srx5000 Srx5400 Srx550 Srx550 Hm Srx550m Srx5600 Srx5800 Srx650

Link	Providers
https://kb.juniper.net/JSA11284

Show plain JSON

{"containers": {"cna": {"affected": [{"platforms": ["MX Series, SRX series"], "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "20.4R1", "status": "unaffected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "20.4R3-S2", "status": "affected", "version": "20.4", "versionType": "custom"}, {"lessThan": "21.1R2-S1, 21.1R3", "status": "affected", "version": "21.1", "versionType": "custom"}, {"lessThan": "21.2R2", "status": "affected", "version": "21.2", "versionType": "custom"}, {"lessThan": "21.3R2", "status": "affected", "version": "21.3", "versionType": "custom"}]}], "configurations": [{"lang": "en", "value": "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with:\n\n  user@host> show security alg status | match sip\n    SIP      : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [ ... services alg sip ]"}], "datePublic": "2022-01-12T00:00:00", "descriptions": [{"lang": "en", "value": "A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"description": "Denial of Service (DoS)", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-01-19T00:21:28", "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kb.juniper.net/JSA11284"}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 20.4R3-S2, 21.1R2-S1, 21.1R3, 21.2R2, 21.2R3, 21.3R2, 21.4R1, and all subsequent releases."}], "source": {"advisory": "JSA11284", "defect": ["1615438"], "discovery": "USER"}, "title": "Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received", "workarounds": [{"lang": "en", "value": "There are no viable workarounds for this issue."}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "sirt@juniper.net", "DATE_PUBLIC": "2022-01-12T17:00:00.000Z", "ID": "CVE-2022-22178", "STATE": "PUBLIC", "TITLE": "Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Junos OS", "version": {"version_data": [{"platform": "MX Series, SRX series", "version_affected": "<", "version_name": "20.4", "version_value": "20.4R3-S2"}, {"platform": "MX Series, SRX series", "version_affected": "<", "version_name": "21.1", "version_value": "21.1R2-S1, 21.1R3"}, {"platform": "MX Series, SRX series", "version_affected": "<", "version_name": "21.2", "version_value": "21.2R2"}, {"platform": "MX Series, SRX series", "version_affected": "<", "version_name": "21.3", "version_value": "21.3R2"}, {"platform": "MX Series, SRX series", "version_affected": "!<", "version_value": "20.4R1"}]}}]}, "vendor_name": "Juniper Networks"}]}}, "configuration": [{"lang": "en", "value": "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with:\n\n  user@host> show security alg status | match sip\n    SIP      : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [ ... services alg sip ]"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."}]}, "exploit": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-121 Stack-based Buffer Overflow"}]}, {"description": [{"lang": "eng", "value": "Denial of Service (DoS)"}]}]}, "references": {"reference_data": [{"name": "https://kb.juniper.net/JSA11284", "refsource": "CONFIRM", "url": "https://kb.juniper.net/JSA11284"}]}, "solution": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 20.4R3-S2, 21.1R2-S1, 21.1R3, 21.2R2, 21.2R3, 21.3R2, 21.4R1, and all subsequent releases."}], "source": {"advisory": "JSA11284", "defect": ["1615438"], "discovery": "USER"}, "work_around": [{"lang": "en", "value": "There are no viable workarounds for this issue."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T03:07:50.118Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.juniper.net/JSA11284"}]}]}, "cveMetadata": {"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "assignerShortName": "juniper", "cveId": "CVE-2022-22178", "datePublished": "2022-01-19T00:21:28.309624Z", "dateReserved": "2021-12-21T00:00:00", "dateUpdated": "2024-09-17T01:05:59.860Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

platforms : [ »

0 : MX Series, SRX series (string)

]

product : Junos OS (string)

vendor : Juniper Networks (string)

versions : [ »

0 : { »

lessThan : 20.4R1 (string)

status : unaffected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : 20.4R3-S2 (string)

status : affected (string)

version : 20.4 (string)

versionType : custom (string)

}

2 : { »

lessThan : 21.1R2-S1, 21.1R3 (string)

status : affected (string)

version : 21.1 (string)

versionType : custom (string)

}

3 : { »

lessThan : 21.2R2 (string)

status : affected (string)

version : 21.2 (string)

versionType : custom (string)

}

4 : { »

lessThan : 21.3R2 (string)

status : affected (string)

version : 21.3 (string)

versionType : custom (string)

}

]

}

]

configurations : [ »

0 : { »

lang : en (string)

value : To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with: user@host> show security alg status | match sip SIP : Enabled Please verify on MX whether the following is configured: [ ... services alg sip ] (string)

}

]

datePublic : 2022-01-12T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-121 (string)

description : CWE-121 Stack-based Buffer Overflow (string)

lang : en (string)

type : CWE (string)

}

]

}

1 : { »

descriptions : [ »

0 : { »

description : Denial of Service (DoS) (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-01-19T00:21:28 (string)

orgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

shortName : juniper (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kb.juniper.net/JSA11284 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 20.4R3-S2, 21.1R2-S1, 21.1R3, 21.2R2, 21.2R3, 21.3R2, 21.4R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA11284 (string)

defect : [ »

0 : 1615438 (string)

]

discovery : USER (string)

}

title : Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received (string)

workarounds : [ »

0 : { »

lang : en (string)

value : There are no viable workarounds for this issue. (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : sirt@juniper.net (string)

DATE_PUBLIC : 2022-01-12T17:00:00.000Z (string)

ID : CVE-2022-22178 (string)

STATE : PUBLIC (string)

TITLE : Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Junos OS (string)

version : { »

version_data : [ »

0 : { »

platform : MX Series, SRX series (string)

version_affected : < (string)

version_name : 20.4 (string)

version_value : 20.4R3-S2 (string)

}

1 : { »

platform : MX Series, SRX series (string)

version_affected : < (string)

version_name : 21.1 (string)

version_value : 21.1R2-S1, 21.1R3 (string)

}

2 : { »

platform : MX Series, SRX series (string)

version_affected : < (string)

version_name : 21.2 (string)

version_value : 21.2R2 (string)

}

3 : { »

platform : MX Series, SRX series (string)

version_affected : < (string)

version_name : 21.3 (string)

version_value : 21.3R2 (string)

}

4 : { »

platform : MX Series, SRX series (string)

version_affected : !< (string)

version_value : 20.4R1 (string)

}

]

}

]

}

vendor_name : Juniper Networks (string)

}

]

}

configuration : [ »

0 : { »

lang : en (string)

value : To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with: user@host> show security alg status | match sip SIP : Enabled Please verify on MX whether the following is configured: [ ... services alg sip ] (string)

}

]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (string)

}

]

}

exploit : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-121 Stack-based Buffer Overflow (string)

}

]

}

1 : { »

description : [ »

0 : { »

lang : eng (string)

value : Denial of Service (DoS) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.juniper.net/JSA11284 (string)

refsource : CONFIRM (string)

url : https://kb.juniper.net/JSA11284 (string)

}

]

}

solution : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 20.4R3-S2, 21.1R2-S1, 21.1R3, 21.2R2, 21.2R3, 21.3R2, 21.4R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA11284 (string)

defect : [ »

0 : 1615438 (string)

]

discovery : USER (string)

}

work_around : [ »

0 : { »

lang : en (string)

value : There are no viable workarounds for this issue. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T03:07:50.118Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kb.juniper.net/JSA11284 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

assignerShortName : juniper (string)

cveId : CVE-2022-22178 (string)

datePublished : 2022-01-19T00:21:28.309624Z (string)

dateReserved : 2021-12-21T00:00:00 (string)

dateUpdated : 2024-09-17T01:05:59.860Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*", "matchCriteriaId": "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "037BA01C-3F5C-4503-A633-71765E9EF774", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*", "matchCriteriaId": "C54B047C-4B38-40C0-9855-067DCF7E48BD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "38984199-E332-4A9C-A4C0-78083D052E15", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "AA6526FB-2941-4D18-9B2E-472AD5A62A53", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*", "matchCriteriaId": "09876787-A40A-4340-9C12-8628C325353B", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*", "matchCriteriaId": "41615104-C17E-44DA-AB0D-6E2053BD4EF4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*", "matchCriteriaId": "625BA7E6-D2AD-4A48-9B94-24328BE5B06A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "F462F4E3-762C-429F-8D25-5521100DD37C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*", "matchCriteriaId": "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*", "matchCriteriaId": "A52AF794-B36B-43A6-82E9-628658624B0A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "3998DC76-F72F-4452-9150-652140B113EB", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*", "matchCriteriaId": "CC78A4CB-D617-43FC-BB51-287D2D0C44ED", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*", "matchCriteriaId": "52699E2B-450A-431C-81E3-DC4483C8B4F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*", "matchCriteriaId": "C39DA74D-F5C7-4C11-857D-50631A110644", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*", "matchCriteriaId": "F72C850A-0530-4DB7-A553-7E19F82122B5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FE2089C-F341-4DC1-B76D-633BC699306D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*", "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*", "matchCriteriaId": "00C7FC57-8ACF-45AA-A227-7E3B350FD24F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*", "matchCriteriaId": "2754C2DF-DF6E-4109-9463-38B4E0465B77", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*", "matchCriteriaId": "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*", "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B557965-0040-4048-B56C-F564FF28635B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB875EBD-A3CD-4466-B2A3-39D47FF94592", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E020556B-693F-4963-BA43-3164AB50FA49", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*", "matchCriteriaId": "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*", "matchCriteriaId": "06A03463-6B1D-4DBA-9E89-CAD5E899B98B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*", "matchCriteriaId": "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*", "matchCriteriaId": "52F0B735-8C49-4B08-950A-296C9CDE43CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento del b\u00fafer en la regi\u00f3n Stack de la memoria en el demonio de procesamiento de flujos (flowd) del Sistema Operativo Junos de Juniper Networks en las series MX y SRX permite a un atacante no autenticado conectado a la red causar un bloqueo de flowd y, por tanto, una denegaci\u00f3n de servicio (DoS). La recepci\u00f3n continuada de estos paquetes espec\u00edficos causar\u00e1 una condici\u00f3n de denegaci\u00f3n de servicio sostenida. Este problema puede ser desencadenado por un paquete espec\u00edfico de Invitaci\u00f3n del Protocolo de Iniciaci\u00f3n de Sesi\u00f3n (SIP) si el SIP ALG est\u00e1 habilitado. Debido a esto, el PIC ser\u00eda reiniciado y todo el tr\u00e1fico que atraviesa el PIC se caer\u00e1. Este problema afecta: Juniper Networks Junos OS versiones 20.4 anteriores a 20.4R3-S2; versiones 21.1 anteriores a 21.1R2-S1, 21.1R3; versiones 21.2 anteriores a 21.2R2; 21.3 versiones anteriores a 21.3R2. Este problema no afecta a versiones del Sistema Operativo Junos de Juniper Networks anteriores a 20.4R1"}], "id": "CVE-2022-22178", "lastModified": "2024-11-21T06:46:19.727", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "sirt@juniper.net", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-01-19T01:15:09.577", "references": [{"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA11284"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA11284"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "sirt@juniper.net", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:* (string)

matchCriteriaId : 20DDC6B7-BFC4-4F0B-8E68-442C23765BF2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 037BA01C-3F5C-4503-A633-71765E9EF774 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:* (string)

matchCriteriaId : C54B047C-4B38-40C0-9855-067DCF7E48BD (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:* (string)

matchCriteriaId : 38984199-E332-4A9C-A4C0-78083D052E15 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:* (string)

matchCriteriaId : AA6526FB-2941-4D18-9B2E-472AD5A62A53 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:* (string)

matchCriteriaId : 09876787-A40A-4340-9C12-8628C325353B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:* (string)

matchCriteriaId : 41615104-C17E-44DA-AB0D-6E2053BD4EF4 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : 625BA7E6-D2AD-4A48-9B94-24328BE5B06A (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : F462F4E3-762C-429F-8D25-5521100DD37C (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:* (string)

matchCriteriaId : C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:* (string)

matchCriteriaId : A52AF794-B36B-43A6-82E9-628658624B0A (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 3998DC76-F72F-4452-9150-652140B113EB (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:* (string)

matchCriteriaId : CC78A4CB-D617-43FC-BB51-287D2D0C44ED (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52699E2B-450A-431C-81E3-DC4483C8B4F2 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D5627740-42E3-4FB1-B8B9-0B768AFFA1EC (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C39DA74D-F5C7-4C11-857D-50631A110644 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F72C850A-0530-4DB7-A553-7E19F82122B5 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FE2089C-F341-4DC1-B76D-633BC699306D (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 27175D9A-CA2C-4218-8042-835E25DFCA43 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 00C7FC57-8ACF-45AA-A227-7E3B350FD24F (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2754C2DF-DF6E-4109-9463-38B4E0465B77 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F4A26704-A6A4-4C4F-9E12-A0A0259491EF (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C982A2FF-A1F9-4830-BAB6-77CFCE1F093F (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 104858BD-D31D-40E0-8524-2EC311F10EAC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B557965-0040-4048-B56C-F564FF28635B (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EB875EBD-A3CD-4466-B2A3-39D47FF94592 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B5E08E1E-0FE4-4294-9497-BBFFECA2A220 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E020556B-693F-4963-BA43-3164AB50FA49 (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06A03463-6B1D-4DBA-9E89-CAD5E899B98B (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5ABA347C-3EF3-4F75-B4D1-54590A57C2BC (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52F0B735-8C49-4B08-950A-296C9CDE43CA (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

43 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de desbordamiento del búfer en la región Stack de la memoria en el demonio de procesamiento de flujos (flowd) del Sistema Operativo Junos de Juniper Networks en las series MX y SRX permite a un atacante no autenticado conectado a la red causar un bloqueo de flowd y, por tanto, una denegación de servicio (DoS). La recepción continuada de estos paquetes específicos causará una condición de denegación de servicio sostenida. Este problema puede ser desencadenado por un paquete específico de Invitación del Protocolo de Iniciación de Sesión (SIP) si el SIP ALG está habilitado. Debido a esto, el PIC sería reiniciado y todo el tráfico que atraviesa el PIC se caerá. Este problema afecta: Juniper Networks Junos OS versiones 20.4 anteriores a 20.4R3-S2; versiones 21.1 anteriores a 21.1R2-S1, 21.1R3; versiones 21.2 anteriores a 21.2R2; 21.3 versiones anteriores a 21.3R2. Este problema no afecta a versiones del Sistema Operativo Junos de Juniper Networks anteriores a 20.4R1 (string)

}

]

id : CVE-2022-22178 (string)

lastModified : 2024-11-21T06:46:19.727 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : sirt@juniper.net (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-01-19T01:15:09.577 (string)

references : [ »

0 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA11284 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA11284 (string)

}

]

sourceIdentifier : sirt@juniper.net (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-121 (string)

}

]

source : sirt@juniper.net (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object