CVE-2022-22207

EPSS 0.75%
Veröffentlicht 20.07.2022 15:15:08
Zuletzt bearbeitet 21.11.2024 06:46:23
Erkennungen
Login

Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash

A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a kernel crash due to intensive polling of Abstracted Fabric (AF) interface statistics and thereby a Denial of Service (DoS). Continued gathering of AF interface statistics will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on MX Series: 20.1 versions later than 20.1R1; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S4; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 48 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 20.1 Update r1-s1

   Juniper ≫ Mx10 Version -
   Juniper ≫ Mx10000 Version -
   Juniper ≫ Mx10003 Version -
   Juniper ≫ Mx10008 Version -
   Juniper ≫ Mx10016 Version -
   Juniper ≫ Mx104 Version -
   Juniper ≫ Mx150 Version -
   Juniper ≫ Mx2008 Version -
   Juniper ≫ Mx2010 Version -
   Juniper ≫ Mx2020 Version -
   Juniper ≫ Mx204 Version -
   Juniper ≫ Mx240 Version -
   Juniper ≫ Mx40 Version -
   Juniper ≫ Mx480 Version -
   Juniper ≫ Mx5 Version -
   Juniper ≫ Mx80 Version -
   Juniper ≫ Mx960 Version -

Juniper ≫ Junos Version 20.1 Update r1-s2

Juniper ≫ Junos Version 20.1 Update r1-s3

Juniper ≫ Junos Version 20.1 Update r1-s4

Juniper ≫ Junos Version 20.1 Update r2

Juniper ≫ Junos Version 20.1 Update r2-s1

Juniper ≫ Junos Version 20.1 Update r2-s2

Juniper ≫ Junos Version 20.1 Update r3

Juniper ≫ Junos Version 20.1 Update r3-s1

Juniper ≫ Junos Version 20.1 Update r3-s2

Juniper ≫ Junos Version 20.1 Update r3-s3

Juniper ≫ Junos Version 20.2 Update -

Juniper ≫ Junos Version 20.2 Update r1

Juniper ≫ Junos Version 20.2 Update r1-s1

Juniper ≫ Junos Version 20.2 Update r1-s2

Juniper ≫ Junos Version 20.2 Update r1-s3

Juniper ≫ Junos Version 20.2 Update r2

Juniper ≫ Junos Version 20.2 Update r2-s1

Juniper ≫ Junos Version 20.2 Update r2-s2

Juniper ≫ Junos Version 20.2 Update r2-s3

Juniper ≫ Junos Version 20.2 Update r3

Juniper ≫ Junos Version 20.2 Update r3-s1

Juniper ≫ Junos Version 20.2 Update r3-s2

Juniper ≫ Junos Version 20.2 Update r3-s3

Juniper ≫ Junos Version 20.2 Update r3-s4

Juniper ≫ Junos Version 20.3 Update -

Juniper ≫ Junos Version 20.3 Update r1

Juniper ≫ Junos Version 20.3 Update r1-s1

Juniper ≫ Junos Version 20.3 Update r1-s2

Juniper ≫ Junos Version 20.3 Update r2

Juniper ≫ Junos Version 20.3 Update r2-s1

Juniper ≫ Junos Version 20.3 Update r3

Juniper ≫ Junos Version 20.3 Update r3-s1

Juniper ≫ Junos Version 20.3 Update r3-s2

Juniper ≫ Junos Version 20.3 Update r3-s3

Juniper ≫ Junos Version 20.4 Update -

Juniper ≫ Junos Version 20.4 Update r1

Juniper ≫ Junos Version 20.4 Update r1-s1

Juniper ≫ Junos Version 20.4 Update r2

Juniper ≫ Junos Version 20.4 Update r2-s1

Juniper ≫ Junos Version 20.4 Update r2-s2

Juniper ≫ Junos Version 21.1 Update -

Juniper ≫ Junos Version 21.1 Update r1

Juniper ≫ Junos Version 21.1 Update r1-s1

Juniper ≫ Junos Version 21.2 Update -

Juniper ≫ Junos Version 21.2 Update r1

Juniper ≫ Junos Version 21.2 Update r1-s1

Juniper ≫ Junos Version 21.2 Update r1-s2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.75%	0.513

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Juniper	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://kb.juniper.net/JSA69711

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-22207

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-22207

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-22207

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-22207