An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When an incoming RESV message corresponding to a protected LSP is malformed it causes an incorrect internal state resulting in an rpd core. This issue affects: Juniper Networks Junos OS All versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S8; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R3; 21.3 versions prior to 21.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.2R3-S3-EVO; 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S1-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO version 21.2R1-EVO and later versions; 21.3-EVO versions prior to 21.3R2-EVO.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Juniper |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
No data.
References
| Link | Providers |
|---|---|
| https://kb.juniper.net/JSA69894 |
|
History
Mon, 16 Sep 2024 23:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed | Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed |
MITRE
Status: PUBLISHED
Assigner: juniper
Published: 2022-10-18T02:46:40.306937Z
Updated: 2024-09-16T22:45:49.144Z
Reserved: 2021-12-21T00:00:00
Link: CVE-2022-22238
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-10-18T03:15:10.747
Modified: 2022-10-21T18:37:49.533
Link: CVE-2022-22238
Redhat
No data.