Vulnerability Name:

CVE-2022-22188 (CCN-224267)

Assigned:2021-12-21
Published:2022-04-13
Updated:2022-04-21
Summary:An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service (DoS). The device must be configured with storm control profiling limiting the number of unknown broadcast, multicast, or unicast traffic to be vulnerable to this issue. This issue affects: Juniper Networks Junos OS on QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series; 20.2 version 20.2R1 and later versions prior to 20.2R2. This issue does not affect: Juniper Networks Junos OS versions prior to 20.2R1.
CVSS v3 Severity:7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-122
CWE-789
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2022-22188

Source: XF
Type: UNKNOWN
juniper-cve202222188-dos(224267)

Source: CONFIRM
Type: Exploit, Vendor Advisory
https://kb.juniper.net/JSA69497

Source: CCN
Type: Juniper Networks Security Bulletin JSA69497
Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang

Vulnerable Configuration:Configuration 1:
  • cpe:/o:juniper:junos:20.2:r1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*
  • AND
  • cpe:/h:juniper:ex4600:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:ex4650:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:qfx5100:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:qfx5110:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:qfx5120:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:qfx5200:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:qfx5210:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    juniper junos 20.2 r1
    juniper junos 20.2 r1-s1
    juniper junos 20.2 r1-s2
    juniper junos 20.2 r1-s3
    juniper ex4600 -
    juniper ex4650 -
    juniper qfx5100 -
    juniper qfx5110 -
    juniper qfx5120 -
    juniper qfx5200 -
    juniper qfx5210 -