CVE-2022-22198

EPSS 0.91%
Veröffentlicht 14.04.2022 16:15:08
Zuletzt bearbeitet 21.11.2024 06:46:22
Erkennungen
Login

Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format

An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 11 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 20.4 Update r1

   Juniper ≫ Mx10 Version -
   Juniper ≫ Mx10000 Version -
   Juniper ≫ Mx10003 Version -
   Juniper ≫ Mx10008 Version -
   Juniper ≫ Mx10016 Version -
   Juniper ≫ Mx104 Version -
   Juniper ≫ Mx150 Version -
   Juniper ≫ Mx2008 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx2020 Version -
   Juniper ≫ Mx204 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx40 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx5 Version -
   Juniper ≫ Mx80 Version -
   Juniper ≫ Mx960 Version -
   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx240h2 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx380 Version -
   Juniper ≫ Srx4000 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx5000 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx550 Hm Version -
   Juniper ≫ Srx550m Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 20.4 Update r1-s1

Juniper ≫ Junos Version 20.4 Update r2

Juniper ≫ Junos Version 20.4 Update r2-s1

Juniper ≫ Junos Version 20.4 Update r2-s2

Juniper ≫ Junos Version 21.1 Update r1

Juniper ≫ Junos Version 21.1 Update r1-s1

Juniper ≫ Junos Version 21.1 Update r2

Juniper ≫ Junos Version 21.2 Update r1

Juniper ≫ Junos Version 21.2 Update r1-s1

Juniper ≫ Junos Version 21.2 Update r1-s2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.91%	0.567

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C
Juniper	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

https://kb.juniper.net/JSA69513

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2022-22198

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-22198

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-22198

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-22198