CVE-2022-22214 — Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

Description (CNA)

An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE crash and thereby a Denial of Service (DoS). An FPC will crash and reboot after receiving a specific transit IPv6 packet over MPLS. Continued receipt of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect systems configured for IPv4 only. This issue affects: Juniper Networks Junos OS All versions prior to 12.3R12-S21; 15.1 versions prior to 15.1R7-S10; 17.3 versions prior to 17.3R3-S12; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S3-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-S1-EVO, 21.3R3-EVO; 21.4 versions prior to 21.4R2-EVO.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Junos OS	affected unspecified before 12.3R12-S21; affected 15.1 before 15.1R7-S10; affected 17.3 before 17.3R3-S12; affected 18.3 before 18.3R3-S6; affected 18.4 before 18.4R2-S9, 18.4R3-S9; affected 19.1 before 19.1R2-S3, 19.1R3-S7; affected 19.2 before 19.2R1-S7, 19.2R3-S3; affected 19.3 before 19.3R2-S7, 19.3R3-S4; affected 19.4 before 19.4R3-S5; affected 20.1 before 20.1R3; affected 20.2 before 20.2R3-S2; affected 20.3 before 20.3R3; affected 20.4 before 20.4R2-S2, 20.4R3; affected 21.1 before 21.1R2
Juniper Networks / Junos OS Evolved	affected unspecified before 20.4R3-S3-EVO; affected 21.2 before 21.2R3-EVO; affected 21.3 before 21.3R2-S1-EVO, 21.3R3-EVO; affected 21.4 before 21.4R2-EVO

Vendor / product

Versions

Juniper Networks / Junos OS

affected unspecified before 12.3R12-S21; affected 15.1 before 15.1R7-S10; affected 17.3 before 17.3R3-S12; affected 18.3 before 18.3R3-S6; affected 18.4 before 18.4R2-S9, 18.4R3-S9; affected 19.1 before 19.1R2-S3, 19.1R3-S7; affected 19.2 before 19.2R1-S7, 19.2R3-S3; affected 19.3 before 19.3R2-S7, 19.3R3-S4; affected 19.4 before 19.4R3-S5; affected 20.1 before 20.1R3; affected 20.2 before 20.2R3-S2; affected 20.3 before 20.3R3; affected 20.4 before 20.4R2-S2, 20.4R3; affected 21.1 before 21.1R2

Juniper Networks / Junos OS Evolved

affected unspecified before 20.4R3-S3-EVO; affected 21.2 before 21.2R3-EVO; affected 21.3 before 21.3R2-S1-EVO, 21.3R3-EVO; affected 21.4 before 21.4R2-EVO

CWE

CWE-20

References

https://kb.juniper.net/JSA69718

ADP enrichment

CVE

No English description supplied.

https://kb.juniper.net/JSA69718