CVE-2022-22168CWE-1287CWE-401

Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot

Medium · published January 19, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability. Continued exploitation of this vulnerability will eventually lead to an FPC reboot and thereby a Denial of Service (DoS). This issue affects: Juniper Networks Junos OS on vMX and MX150: All versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00391 · 32.0th percentile
Weaknesses
CWE-1287 · Improper Validation of Specified Type of Input; CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2022-01-19T00:21Z
EPSS history
Timeline
  • 19 JAN 00:21Z
    Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot
    cvelistv5