6.5

CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service (DoS). The rpd CPU spikes to 100% after a malformed ISIS TLV has been received which will lead to processing issues of routing updates and in turn traffic impact. This issue affects: Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S3-EVO; 21.2 versions prior to 21.2R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Data is provided by the National Vulnerability Database (NVD)
Juniper ≫ Junos Version19.3 Updater1
Juniper ≫ Junos Version19.3 Updater1-s1
Juniper ≫ Junos Version19.3 Updater2
Juniper ≫ Junos Version19.3 Updater2-s1
Juniper ≫ Junos Version19.3 Updater2-s2
Juniper ≫ Junos Version19.3 Updater2-s3
Juniper ≫ Junos Version19.3 Updater2-s4
Juniper ≫ Junos Version19.3 Updater2-s5
Juniper ≫ Junos Version19.3 Updater2-s6
Juniper ≫ Junos Version19.3 Updater3
Juniper ≫ Junos Version19.3 Updater3-s1
Juniper ≫ Junos Version19.3 Updater3-s2
Juniper ≫ Junos Version19.3 Updater3-s3
Juniper ≫ Junos Version19.4 Updater1
Juniper ≫ Junos Version19.4 Updater1-s1
Juniper ≫ Junos Version19.4 Updater1-s2
Juniper ≫ Junos Version19.4 Updater1-s3
Juniper ≫ Junos Version19.4 Updater1-s4
Juniper ≫ Junos Version19.4 Updater2
Juniper ≫ Junos Version19.4 Updater2-s1
Juniper ≫ Junos Version19.4 Updater2-s2
Juniper ≫ Junos Version19.4 Updater2-s3
Juniper ≫ Junos Version19.4 Updater2-s4
Juniper ≫ Junos Version19.4 Updater2-s5
Juniper ≫ Junos Version19.4 Updater3
Juniper ≫ Junos Version19.4 Updater3-s1
Juniper ≫ Junos Version19.4 Updater3-s2
Juniper ≫ Junos Version19.4 Updater3-s3
Juniper ≫ Junos Version19.4 Updater3-s4
Juniper ≫ Junos Version19.4 Updater3-s5
Juniper ≫ Junos Version20.1 Updater1
Juniper ≫ Junos Version20.1 Updater1-s1
Juniper ≫ Junos Version20.1 Updater1-s2
Juniper ≫ Junos Version20.1 Updater1-s3
Juniper ≫ Junos Version20.1 Updater1-s4
Juniper ≫ Junos Version20.1 Updater2
Juniper ≫ Junos Version20.1 Updater2-s1
Juniper ≫ Junos Version20.1 Updater2-s2
Juniper ≫ Junos Version20.1 Updater3
Juniper ≫ Junos Version20.1 Updater3-s1
Juniper ≫ Junos Version20.2 Updater1
Juniper ≫ Junos Version20.2 Updater1-s1
Juniper ≫ Junos Version20.2 Updater1-s2
Juniper ≫ Junos Version20.2 Updater1-s3
Juniper ≫ Junos Version20.2 Updater2
Juniper ≫ Junos Version20.2 Updater2-s1
Juniper ≫ Junos Version20.2 Updater2-s2
Juniper ≫ Junos Version20.2 Updater2-s3
Juniper ≫ Junos Version20.2 Updater3
Juniper ≫ Junos Version20.2 Updater3-s1
Juniper ≫ Junos Version20.2 Updater3-s2
Juniper ≫ Junos Version20.3 Updater1
Juniper ≫ Junos Version20.3 Updater1-s1
Juniper ≫ Junos Version20.3 Updater2
Juniper ≫ Junos Version20.3 Updater2-s1
Juniper ≫ Junos Version20.3 Updater3
Juniper ≫ Junos Version20.4 Updater1
Juniper ≫ Junos Version20.4 Updater1-s1
Juniper ≫ Junos Version20.4 Updater2
Juniper ≫ Junos Version20.4 Updater2-s1
Juniper ≫ Junos Version20.4 Updater2-s2
Juniper ≫ Junos Version21.1 Updater1
Juniper ≫ Junos Version21.1 Updater1-s1
Juniper ≫ Junos Version21.1 Updater2
Juniper ≫ Junos Version21.1 Updater2-s1
Juniper ≫ Junos Version21.1 Updater2-s2
Juniper ≫ Junos Version21.2 Updater1
Juniper ≫ Junos Version21.2 Updater1-s1
Juniper ≫ Junos Version21.2 Updater1-s2
Juniper ≫ Junos Os Evolved Version < 20.4
Juniper ≫ Junos Os Evolved Version20.4 Updater1
Juniper ≫ Junos Os Evolved Version20.4 Updater1-s1
Juniper ≫ Junos Os Evolved Version20.4 Updater1-s2
Juniper ≫ Junos Os Evolved Version20.4 Updater2
Juniper ≫ Junos Os Evolved Version20.4 Updater2-s1
Juniper ≫ Junos Os Evolved Version20.4 Updater2-s2
Juniper ≫ Junos Os Evolved Version20.4 Updater2-s3
Juniper ≫ Junos Os Evolved Version20.4 Updater3
Juniper ≫ Junos Os Evolved Version20.4 Updater3-s1
Juniper ≫ Junos Os Evolved Version20.4 Updater3-s2
Juniper ≫ Junos Os Evolved Version21.2 Updater1
Juniper ≫ Junos Os Evolved Version21.2 Updater1-s1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.12% 0.324
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
sirt@juniper.net 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.