CVE-2022-22207

EPSS 0.46%
Published 20.07.2022 15:15:08
Last modified 21.11.2024 06:46:23
Source sirt@juniper.net
Teams watchlist Login
Open Login

A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a kernel crash due to intensive polling of Abstracted Fabric (AF) interface statistics and thereby a Denial of Service (DoS). Continued gathering of AF interface statistics will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on MX Series: 20.1 versions later than 20.1R1; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S4; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R2.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version20.1 Updater1-s1

   Juniper ≫ Mx10 Version-
   Juniper ≫ Mx10000 Version-
   Juniper ≫ Mx10003 Version-
   Juniper ≫ Mx10008 Version-
   Juniper ≫ Mx10016 Version-
   Juniper ≫ Mx104 Version-
   Juniper ≫ Mx150 Version-
   Juniper ≫ Mx2008 Version-
   Juniper ≫ Mx2010 Version-
   Juniper ≫ Mx2020 Version-
   Juniper ≫ Mx204 Version-
   Juniper ≫ Mx240 Version-
   Juniper ≫ Mx40 Version-
   Juniper ≫ Mx480 Version-
   Juniper ≫ Mx5 Version-
   Juniper ≫ Mx80 Version-
   Juniper ≫ Mx960 Version-

Juniper ≫ Junos Version20.1 Updater1-s2

Juniper ≫ Junos Version20.1 Updater1-s3

Juniper ≫ Junos Version20.1 Updater1-s4

Juniper ≫ Junos Version20.1 Updater2

Juniper ≫ Junos Version20.1 Updater2-s1

Juniper ≫ Junos Version20.1 Updater2-s2

Juniper ≫ Junos Version20.1 Updater3

Juniper ≫ Junos Version20.1 Updater3-s1

Juniper ≫ Junos Version20.1 Updater3-s2

Juniper ≫ Junos Version20.1 Updater3-s3

Juniper ≫ Junos Version20.2 Update-

Juniper ≫ Junos Version20.2 Updater1

Juniper ≫ Junos Version20.2 Updater1-s1

Juniper ≫ Junos Version20.2 Updater1-s2

Juniper ≫ Junos Version20.2 Updater1-s3

Juniper ≫ Junos Version20.2 Updater2

Juniper ≫ Junos Version20.2 Updater2-s1

Juniper ≫ Junos Version20.2 Updater2-s2

Juniper ≫ Junos Version20.2 Updater2-s3

Juniper ≫ Junos Version20.2 Updater3

Juniper ≫ Junos Version20.2 Updater3-s1

Juniper ≫ Junos Version20.2 Updater3-s2

Juniper ≫ Junos Version20.2 Updater3-s3

Juniper ≫ Junos Version20.2 Updater3-s4

Juniper ≫ Junos Version20.3 Update-

Juniper ≫ Junos Version20.3 Updater1

Juniper ≫ Junos Version20.3 Updater1-s1

Juniper ≫ Junos Version20.3 Updater1-s2

Juniper ≫ Junos Version20.3 Updater2

Juniper ≫ Junos Version20.3 Updater2-s1

Juniper ≫ Junos Version20.3 Updater3

Juniper ≫ Junos Version20.3 Updater3-s1

Juniper ≫ Junos Version20.3 Updater3-s2

Juniper ≫ Junos Version20.3 Updater3-s3

Juniper ≫ Junos Version20.4 Update-

Juniper ≫ Junos Version20.4 Updater1

Juniper ≫ Junos Version20.4 Updater1-s1

Juniper ≫ Junos Version20.4 Updater2

Juniper ≫ Junos Version20.4 Updater2-s1

Juniper ≫ Junos Version20.4 Updater2-s2

Juniper ≫ Junos Version21.1 Update-

Juniper ≫ Junos Version21.1 Updater1

Juniper ≫ Junos Version21.1 Updater1-s1

Juniper ≫ Junos Version21.2 Update-

Juniper ≫ Junos Version21.2 Updater1

Juniper ≫ Junos Version21.2 Updater1-s1

Juniper ≫ Junos Version21.2 Updater1-s2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.46%	0.63

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
sirt@juniper.net	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://kb.juniper.net/JSA69711

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-22207

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-22207

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-22207

EUVD