CVE-2022-22213 — Improper Handling of Undefined Values in Networks Junos OS

CWE-232 — Improper Handling of Undefined Values4 documents4 sources
Severity
5.9MEDIUMNVD
EPSS
0.3%
top 48.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Juniper Networks Junos OSJuniper Networks Junos OS EvolvedJuniper Junos+1 more
Timeline
PublishedJul 20
Latest updateJul 21

Description

A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Malicious exploitation of this issue requires a very specific co…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5juniper_networks/junos_os_evolved21.1 — 21.1R3-S1-EVO+3
▶CVEListV5juniper_networks/junos_os21.1 — 21.1R3-S1+3
▶NVDjuniper/junos_os_evolved4 versions+3
▶NVDjuniper/junos4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-gm94-hchp-rw5x: A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS Evolved may all↗2022-07-21
▶
CVEList
Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update↗2022-07-20
▶

📋Vendor Advisories

1
Juniper
CVE-2022-22213: A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS Evolved may all↗2022-07-20
▶
CVE-2022-22213 — Improper Handling of Undefined Values | cvebase