A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the Layer 2 Address Learning Manager (L2ALM) process will crash leading to an FPC reboot. Continued receipt of this specific packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on QFX5000 Series, MX Series: 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to 20.4R3-S2; 21.2 versions prior to 21.2R2-S1. This issue does not affect Juniper Networks Junos OS: All versions prior to 20.3R1; 21.1 version 21.1R1 and later versions.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00081.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Juniper Networks Junos OS affected
Version Status Constraints
20.3 affected < 20.3R3-S3
20.4 affected < 20.4R3-S2
21.2 affected < 21.2R2-S1
Juniper Networks Junos OS affected
Version Status Constraints
unspecified unaffected < 20.3R1
21.1R1 unaffected < 21.1*

Configuration 1 [-]

AND
OR cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*
OR cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5100-96s:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5200-32c:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5200-48y:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5210-64c:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:qfx5700:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Juniper Subscribe
Junos Subscribe
Mx10 Subscribe
Mx10000 Subscribe
Mx10003 Subscribe
Mx10008 Subscribe
Mx10016 Subscribe
Mx104 Subscribe
Mx150 Subscribe
Mx2008 Subscribe
Mx2010 Subscribe
Mx2020 Subscribe
Mx204 Subscribe
Mx240 Subscribe
Mx40 Subscribe
Mx480 Subscribe
Mx5 Subscribe
Mx80 Subscribe
Mx960 Subscribe
Qfx5100 Subscribe
Qfx5100-96s Subscribe
Qfx5110 Subscribe
Qfx5120 Subscribe
Qfx5130 Subscribe
Qfx5200 Subscribe
Qfx5200-32c Subscribe
Qfx5200-48y Subscribe
Qfx5210 Subscribe
Qfx5210-64c Subscribe
Qfx5220 Subscribe
Qfx5700 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-27357 A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the Layer 2 Address Learning Manager (L2ALM) process will crash leading to an FPC reboot. Continued receipt of this specific packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on QFX5000 Series, MX Series: 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to 20.4R3-S2; 21.2 versions prior to 21.2R2-S1. This issue does not affect Juniper Networks Junos OS: All versions prior to 20.3R1; 21.1 version 21.1R1 and later versions.
Fixes

Solution

The following software releases have been updated to resolve this specific issue: 20.3R3-S3, 20.4R3-S2, 21.2R2-S1, and all subsequent releases.

Workaround

There are no viable workarounds for this issue.

References
Link Providers
https://kb.juniper.net/JSA69714 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2024-09-16T16:33:29.201Z

Reserved: 2021-12-21T00:00:00

Link: CVE-2022-22210

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-07-20T15:15:08.703

Modified: 2024-11-21T06:46:23.960

Link: CVE-2022-22210

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses