CVE-2022-22171

Junos OS: Specific packets over VXLAN cause FPC reset

State: Published
Severity: 7.5 High
Published: Jan 19, 2022
Updated: Sep 16, 2024
Reserved: Dec 21, 2021

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect versions of Junos OS prior to 19.4R1.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
Junos OSJuniper Networks	before 19.4R1Not affected 19.4 to before 19.4R3-S7Affected 20.1 to before 20.1R3-S3Affected 20.2 to before 20.2R3-S3Affected 20.3 to before 20.3R3-S2Affected 20.4 to before 20.4R3-S1Affected 21.1 to before 21.1R3Affected 21.2 to before 21.2R2Affected 21.3 to before 21.3R1-S1, 21.3R2Affected

References

https://kb.juniper.net/JSA11277

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.