CVE-2022-22197: Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening
Juniper Networks · Junos OS
Vendor fix available · Affected: Juniper Networks Junos OS · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 66% of scored CVEs
DescriptionCVE.org
An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker with an established BGP session to cause a Denial of Service (DoS). This issue occurs when proxy-generate route-target filtering is enabled, and certain proxy-route add and delete events are happening. This issue affects: Juniper Networks Junos OS All versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S8, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S2, 20.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R3-EVO; 20.3 versions prior to 20.3R2-EVO.
Affected products2
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Juniper Networks · Junos OSbefore 17.3R3-S11; from 17.4 before 17.4R2-S13, 17.4R3-S4; from 18.3 before 18.3R3-S4; from 18.4 before 18.4R1-S8, 18.4R2-S8, 18.4R3-S6; from 19.1 before 19.1R3-S4; from 19.2 before 19.2R1-S6, 19.2R3-S2 and 5 more
- Juniper Networks · Junos OS Evolvedbefore 20.1R3-EVO; from 20.2 before 20.2R3-EVO; from 20.3 before 20.3R2-EVO
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Juniper Networks
- Published
- April 2022
CoverageNo articles yet
No CyberSIXT article names CVE-2022-22197 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.