CVE-2022-22161Uncontrolled Resource Consumption in Networks Junos OS

Severity
7.5HIGHNVD
EPSS
1.0%
top 23.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 19
Latest updateJan 20

Description

An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipted of a flood will create a sustained Denial of Service (DoS) condition. Once the flood subsides the system will recover by itself. An indication that the system is affected by this issue would be that an

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

CVEListV5juniper_networks/junos_osunspecified18.3R3-S6+11
NVDjuniper/junos18.2+12

🔴Vulnerability Details

2
GHSA
GHSA-82f9-p6mv-5rcx: An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to caus2022-01-20
CVEList
Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic2022-01-19

📋Vendor Advisories

1
Juniper
CVE-2022-22161: An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to caus2022-01-19
CVE-2022-22161 — Uncontrolled Resource Consumption | cvebase