An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When an incoming RESV message corresponding to a protected LSP is malformed it causes an incorrect internal state resulting in an rpd core. This issue affects: Juniper Networks Junos OS All versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S8; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R3; 21.3 versions prior to 21.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.2R3-S3-EVO; 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S1-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO version 21.2R1-EVO and later versions; 21.3-EVO versions prior to 21.3R2-EVO.
Metrics
No CVSS v4.0
Attack Vector Adjacent Network
Attack Complexity High
Privileges Required None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
Vendors | Products |
---|---|
Juniper |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
No data.
References
Link | Providers |
---|---|
https://kb.juniper.net/JSA69894 |
History
Mon, 16 Sep 2024 23:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed | Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed |
MITRE
Status: PUBLISHED
Assigner: juniper
Published: 2022-10-18T02:46:40.306937Z
Updated: 2024-09-16T22:45:49.144Z
Reserved: 2021-12-21T00:00:00
Link: CVE-2022-22238
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-10-18T03:15:10.747
Modified: 2024-11-21T06:46:27.683
Link: CVE-2022-22238
Redhat
No data.