Log in Start free

Vulnerability · Published Apr 14, 2022 · Assigned by juniper

CVE-2022-22197Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening

High 7.5

In plain English

A high-severity security flaw in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 33.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker with an established BGP session to cause a Denial of Service (DoS). This issue occurs when proxy-generate route-target filtering is enabled, and certain proxy-route add and delete events are happening. This issue affects: Juniper Networks Junos OS All versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S8, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S2, 20.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R3-EVO; 20.3 versions prior to 20.3R2-EVO.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS unspecified – before 17.3R3-S1117.4 – before 17.4R2-S13, 17.4R3-S418.3 – before 18.3R3-S418.4 – before 18.4R1-S8, 18.4R2-S8, 18.4R3-S619.1 – before 19.1R3-S419.2 – before 19.2R1-S6, 19.2R3-S219.3 – before 19.3R2-S6, 19.3R3-S119.4 – before 19.4R1-S4, 19.4R2-S4, 19.4R3
Juniper Networks Junos OS Evolved unspecified – before 20.1R3-EVO20.2 – before 20.2R3-EVO20.3 – before 20.3R2-EVO

Weakness: CWE-672 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References