CVE-2022-22198 - Vulnerability Details

Vendors	Products
Juniper	Junos Mx10 Mx10000 Mx10003 Mx10008 Mx10016 Mx104 Mx150 Mx2008 Mx2010 Mx2020 Mx204 Mx240 Mx40 Mx480 Mx5 Mx80 Mx960 Srx100 Srx110 Srx1400 Srx1500 Srx210 Srx220 Srx240 Srx240h2 Srx300 Srx320 Srx340 Srx3400 Srx345 Srx3600 Srx380 Srx4000 Srx4100 Srx4200 Srx4600 Srx5000 Srx5400 Srx550 Srx550 Hm Srx550m Srx5600 Srx5800 Srx650

Link	Providers
https://kb.juniper.net/JSA69513

Show plain JSON

{"containers": {"cna": {"affected": [{"platforms": ["MX Series, SRX Series"], "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "20.4R1", "status": "unaffected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "20.4R3", "status": "affected", "version": "20.4", "versionType": "custom"}, {"lessThan": "21.1R2-S1, 21.1R3", "status": "affected", "version": "21.1", "versionType": "custom"}, {"lessThan": "21.2R2", "status": "affected", "version": "21.2", "versionType": "custom"}]}], "configurations": [{"lang": "en", "value": "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with:\n\n  user@host> show security alg status | match sip\n  SIP : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [ services ... rule <rule-name> (term <term-name>) from/match application/application-set <name> ]\n\nwhere either\na. name = junos-sip or\nan application or application-set refers to SIP:\nb. [ applications application <name> application-protocol sip ] or\nc. [ applications application-set <name> application junos-sip ]"}], "datePublic": "2022-04-13T00:00:00", "descriptions": [{"lang": "en", "value": "An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1."}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-824", "description": "CWE-824 Access of Uninitialized Pointer", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"description": "Denial of Service (DoS)", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-04-14T15:51:01", "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kb.juniper.net/JSA69513"}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 20.4R3, 21.1R2-S1, 21.1R3, 21.2R2, 21.3R1, and all subsequent releases."}], "source": {"advisory": "JSA69513", "defect": ["1612450"], "discovery": "USER"}, "title": "Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format", "workarounds": [{"lang": "en", "value": "There are no viable workarounds for this issue, but it should be considered to disable the SIP ALG if it's not strictly needed."}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "sirt@juniper.net", "DATE_PUBLIC": "2022-04-13T07:00:00.000Z", "ID": "CVE-2022-22198", "STATE": "PUBLIC", "TITLE": "Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Junos OS", "version": {"version_data": [{"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "20.4", "version_value": "20.4R3"}, {"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "21.1", "version_value": "21.1R2-S1, 21.1R3"}, {"platform": "MX Series, SRX Series", "version_affected": "<", "version_name": "21.2", "version_value": "21.2R2"}, {"platform": "MX Series, SRX Series", "version_affected": "!<", "version_value": "20.4R1"}]}}]}, "vendor_name": "Juniper Networks"}]}}, "configuration": [{"lang": "en", "value": "To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with:\n\n  user@host> show security alg status | match sip\n  SIP : Enabled\n\nPlease verify on MX whether the following is configured:\n\n  [ services ... rule <rule-name> (term <term-name>) from/match application/application-set <name> ]\n\nwhere either\na. name = junos-sip or\nan application or application-set refers to SIP:\nb. [ applications application <name> application-protocol sip ] or\nc. [ applications application-set <name> application junos-sip ]"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1."}]}, "exploit": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-824 Access of Uninitialized Pointer"}]}, {"description": [{"lang": "eng", "value": "Denial of Service (DoS)"}]}]}, "references": {"reference_data": [{"name": "https://kb.juniper.net/JSA69513", "refsource": "CONFIRM", "url": "https://kb.juniper.net/JSA69513"}]}, "solution": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 20.4R3, 21.1R2-S1, 21.1R3, 21.2R2, 21.3R1, and all subsequent releases."}], "source": {"advisory": "JSA69513", "defect": ["1612450"], "discovery": "USER"}, "work_around": [{"lang": "en", "value": "There are no viable workarounds for this issue, but it should be considered to disable the SIP ALG if it's not strictly needed."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T03:07:50.206Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.juniper.net/JSA69513"}]}]}, "cveMetadata": {"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "assignerShortName": "juniper", "cveId": "CVE-2022-22198", "datePublished": "2022-04-14T15:51:01.439050Z", "dateReserved": "2021-12-21T00:00:00", "dateUpdated": "2024-09-17T02:57:45.257Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

platforms : [ »

0 : MX Series, SRX Series (string)

]

product : Junos OS (string)

vendor : Juniper Networks (string)

versions : [ »

0 : { »

lessThan : 20.4R1 (string)

status : unaffected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : 20.4R3 (string)

status : affected (string)

version : 20.4 (string)

versionType : custom (string)

}

2 : { »

lessThan : 21.1R2-S1, 21.1R3 (string)

status : affected (string)

version : 21.1 (string)

versionType : custom (string)

}

3 : { »

lessThan : 21.2R2 (string)

status : affected (string)

version : 21.2 (string)

versionType : custom (string)

}

]

}

]

configurations : [ »

0 : { »

lang : en (string)

value : To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with: user@host> show security alg status | match sip SIP : Enabled Please verify on MX whether the following is configured: [ services ... rule <rule-name> (term <term-name>) from/match application/application-set <name> ] where either a. name = junos-sip or an application or application-set refers to SIP: b. [ applications application <name> application-protocol sip ] or c. [ applications application-set <name> application junos-sip ] (string)

}

]

datePublic : 2022-04-13T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1. (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-824 (string)

description : CWE-824 Access of Uninitialized Pointer (string)

lang : en (string)

type : CWE (string)

}

]

}

1 : { »

descriptions : [ »

0 : { »

description : Denial of Service (DoS) (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-04-14T15:51:01 (string)

orgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

shortName : juniper (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kb.juniper.net/JSA69513 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 20.4R3, 21.1R2-S1, 21.1R3, 21.2R2, 21.3R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA69513 (string)

defect : [ »

0 : 1612450 (string)

]

discovery : USER (string)

}

title : Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format (string)

workarounds : [ »

0 : { »

lang : en (string)

value : There are no viable workarounds for this issue, but it should be considered to disable the SIP ALG if it's not strictly needed. (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : sirt@juniper.net (string)

DATE_PUBLIC : 2022-04-13T07:00:00.000Z (string)

ID : CVE-2022-22198 (string)

STATE : PUBLIC (string)

TITLE : Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Junos OS (string)

version : { »

version_data : [ »

0 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 20.4 (string)

version_value : 20.4R3 (string)

}

1 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 21.1 (string)

version_value : 21.1R2-S1, 21.1R3 (string)

}

2 : { »

platform : MX Series, SRX Series (string)

version_affected : < (string)

version_name : 21.2 (string)

version_value : 21.2R2 (string)

}

3 : { »

platform : MX Series, SRX Series (string)

version_affected : !< (string)

version_value : 20.4R1 (string)

}

]

}

]

}

vendor_name : Juniper Networks (string)

}

]

}

configuration : [ »

0 : { »

lang : en (string)

value : To be affected the SIP ALG needs to be enabled, either implicitly / by default or by way of configuration. Please verify on SRX with: user@host> show security alg status | match sip SIP : Enabled Please verify on MX whether the following is configured: [ services ... rule <rule-name> (term <term-name>) from/match application/application-set <name> ] where either a. name = junos-sip or an application or application-set refers to SIP: b. [ applications application <name> application-protocol sip ] or c. [ applications application-set <name> application junos-sip ] (string)

}

]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1. (string)

}

]

}

exploit : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

generator : { »

engine : Vulnogram 0.0.9 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-824 Access of Uninitialized Pointer (string)

}

]

}

1 : { »

description : [ »

0 : { »

lang : eng (string)

value : Denial of Service (DoS) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.juniper.net/JSA69513 (string)

refsource : CONFIRM (string)

url : https://kb.juniper.net/JSA69513 (string)

}

]

}

solution : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 20.4R3, 21.1R2-S1, 21.1R3, 21.2R2, 21.3R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA69513 (string)

defect : [ »

0 : 1612450 (string)

]

discovery : USER (string)

}

work_around : [ »

0 : { »

lang : en (string)

value : There are no viable workarounds for this issue, but it should be considered to disable the SIP ALG if it's not strictly needed. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T03:07:50.206Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kb.juniper.net/JSA69513 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

assignerShortName : juniper (string)

cveId : CVE-2022-22198 (string)

datePublished : 2022-04-14T15:51:01.439050Z (string)

dateReserved : 2021-12-21T00:00:00 (string)

dateUpdated : 2024-09-17T02:57:45.257Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*", "matchCriteriaId": "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "037BA01C-3F5C-4503-A633-71765E9EF774", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*", "matchCriteriaId": "C54B047C-4B38-40C0-9855-067DCF7E48BD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "38984199-E332-4A9C-A4C0-78083D052E15", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "AA6526FB-2941-4D18-9B2E-472AD5A62A53", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*", "matchCriteriaId": "625BA7E6-D2AD-4A48-9B94-24328BE5B06A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "F462F4E3-762C-429F-8D25-5521100DD37C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*", "matchCriteriaId": "C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*", "matchCriteriaId": "A52AF794-B36B-43A6-82E9-628658624B0A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "3998DC76-F72F-4452-9150-652140B113EB", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "36ED4552-2420-45F9-B6E4-6DA2B2B12870", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*", "matchCriteriaId": "52699E2B-450A-431C-81E3-DC4483C8B4F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*", "matchCriteriaId": "C39DA74D-F5C7-4C11-857D-50631A110644", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*", "matchCriteriaId": "F72C850A-0530-4DB7-A553-7E19F82122B5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FE2089C-F341-4DC1-B76D-633BC699306D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*", "matchCriteriaId": "27175D9A-CA2C-4218-8042-835E25DFCA43", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*", "matchCriteriaId": "00C7FC57-8ACF-45AA-A227-7E3B350FD24F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*", "matchCriteriaId": "2754C2DF-DF6E-4109-9463-38B4E0465B77", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4A26704-A6A4-4C4F-9E12-A0A0259491EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*", "matchCriteriaId": "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*", "matchCriteriaId": "104858BD-D31D-40E0-8524-2EC311F10EAC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B557965-0040-4048-B56C-F564FF28635B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB875EBD-A3CD-4466-B2A3-39D47FF94592", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5E08E1E-0FE4-4294-9497-BBFFECA2A220", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E020556B-693F-4963-BA43-3164AB50FA49", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*", "matchCriteriaId": "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*", "matchCriteriaId": "06A03463-6B1D-4DBA-9E89-CAD5E899B98B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*", "matchCriteriaId": "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*", "matchCriteriaId": "52F0B735-8C49-4B08-950A-296C9CDE43CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1."}, {"lang": "es", "value": "Una vulnerabilidad de Acceso de Puntero no Inicializado en la SIP ALG de Juniper Networks Junos OS permite a un atacante no autenticado basado en la red causar una Denegaci\u00f3n de Servicio (DoS). La recepci\u00f3n continuada de estos paquetes espec\u00edficos causar\u00e1 una condici\u00f3n de denegaci\u00f3n de servicio sostenida. En todas las plataformas MX y SRX, si la ALG de SIP est\u00e1 habilitada, un MS-MPC o MS-MIC, o SPC ser\u00e1 bloqueado si recibe un mensaje SIP con un formato de encabezado de contacto espec\u00edfico. Este problema afecta a Juniper Networks Junos OS en las series MX y SRX: versiones 20.4 anteriores a 20.4R3; versiones 21.1 anteriores a 21.1R2-S1, 21.1R3; versiones 21.2 anteriores a 21.2R2. Este problema no afecta a versiones anteriores a 20.4R1"}], "id": "CVE-2022-22198", "lastModified": "2024-11-21T06:46:22.510", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "sirt@juniper.net", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-14T16:15:08.653", "references": [{"source": "sirt@juniper.net", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://kb.juniper.net/JSA69513"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://kb.juniper.net/JSA69513"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-824"}], "source": "sirt@juniper.net", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-824"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:* (string)

matchCriteriaId : 20DDC6B7-BFC4-4F0B-8E68-442C23765BF2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 037BA01C-3F5C-4503-A633-71765E9EF774 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:* (string)

matchCriteriaId : C54B047C-4B38-40C0-9855-067DCF7E48BD (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:* (string)

matchCriteriaId : 38984199-E332-4A9C-A4C0-78083D052E15 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:* (string)

matchCriteriaId : AA6526FB-2941-4D18-9B2E-472AD5A62A53 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : 625BA7E6-D2AD-4A48-9B94-24328BE5B06A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : F462F4E3-762C-429F-8D25-5521100DD37C (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:* (string)

matchCriteriaId : C0BC9DAC-D6B5-4C5E-8C73-6E550D9A30F5 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:* (string)

matchCriteriaId : A52AF794-B36B-43A6-82E9-628658624B0A (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 3998DC76-F72F-4452-9150-652140B113EB (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:* (string)

matchCriteriaId : 36ED4552-2420-45F9-B6E4-6DA2B2B12870 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52699E2B-450A-431C-81E3-DC4483C8B4F2 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D5627740-42E3-4FB1-B8B9-0B768AFFA1EC (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C39DA74D-F5C7-4C11-857D-50631A110644 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F72C850A-0530-4DB7-A553-7E19F82122B5 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FE2089C-F341-4DC1-B76D-633BC699306D (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 27175D9A-CA2C-4218-8042-835E25DFCA43 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 00C7FC57-8ACF-45AA-A227-7E3B350FD24F (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2754C2DF-DF6E-4109-9463-38B4E0465B77 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F4A26704-A6A4-4C4F-9E12-A0A0259491EF (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C982A2FF-A1F9-4830-BAB6-77CFCE1F093F (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 104858BD-D31D-40E0-8524-2EC311F10EAC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B557965-0040-4048-B56C-F564FF28635B (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EB875EBD-A3CD-4466-B2A3-39D47FF94592 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B5E08E1E-0FE4-4294-9497-BBFFECA2A220 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E020556B-693F-4963-BA43-3164AB50FA49 (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06A03463-6B1D-4DBA-9E89-CAD5E899B98B (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5ABA347C-3EF3-4F75-B4D1-54590A57C2BC (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 52F0B735-8C49-4B08-950A-296C9CDE43CA (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

43 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad de Acceso de Puntero no Inicializado en la SIP ALG de Juniper Networks Junos OS permite a un atacante no autenticado basado en la red causar una Denegación de Servicio (DoS). La recepción continuada de estos paquetes específicos causará una condición de denegación de servicio sostenida. En todas las plataformas MX y SRX, si la ALG de SIP está habilitada, un MS-MPC o MS-MIC, o SPC será bloqueado si recibe un mensaje SIP con un formato de encabezado de contacto específico. Este problema afecta a Juniper Networks Junos OS en las series MX y SRX: versiones 20.4 anteriores a 20.4R3; versiones 21.1 anteriores a 21.1R2-S1, 21.1R3; versiones 21.2 anteriores a 21.2R2. Este problema no afecta a versiones anteriores a 20.4R1 (string)

}

]

id : CVE-2022-22198 (string)

lastModified : 2024-11-21T06:46:22.510 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.1 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:M/Au:N/C:N/I:N/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 6.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : sirt@juniper.net (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-04-14T16:15:08.653 (string)

references : [ »

0 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA69513 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA69513 (string)

}

]

sourceIdentifier : sirt@juniper.net (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-824 (string)

}

]

source : sirt@juniper.net (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-824 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object