5.5

CVE-2022-22240

Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario

An Allocation of Resources Without Limits or Throttling and a Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated low privileged attacker to cause a Denial of Sevice (DoS). In a high-scaled BGP routing environment with rib-sharding enabled, two issues may occur when executing a specific CLI command. One is a memory leak issue with rpd where the leak rate is not constant, and the other is a temporary spike in rpd memory usage during command execution. This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S9; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2-S1, 21.2R3; 21.3 versions prior to 21.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S1-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO versions prior to 21.2R1-S2-EVO, 21.2R3-EVO; 21.3-EVO versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 19.2R1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 19.4 Update -
Juniper ≫ Junos Version 19.4 Update r1
Juniper ≫ Junos Version 19.4 Update r1-s1
Juniper ≫ Junos Version 19.4 Update r1-s2
Juniper ≫ Junos Version 19.4 Update r1-s3
Juniper ≫ Junos Version 19.4 Update r1-s4
Juniper ≫ Junos Version 19.4 Update r2
Juniper ≫ Junos Version 19.4 Update r2-s1
Juniper ≫ Junos Version 19.4 Update r2-s2
Juniper ≫ Junos Version 19.4 Update r2-s3
Juniper ≫ Junos Version 19.4 Update r2-s4
Juniper ≫ Junos Version 19.4 Update r2-s5
Juniper ≫ Junos Version 19.4 Update r2-s6
Juniper ≫ Junos Version 19.4 Update r3
Juniper ≫ Junos Version 19.4 Update r3-s1
Juniper ≫ Junos Version 19.4 Update r3-s2
Juniper ≫ Junos Version 19.4 Update r3-s3
Juniper ≫ Junos Version 19.4 Update r3-s4
Juniper ≫ Junos Version 19.4 Update r3-s5
Juniper ≫ Junos Version 19.4 Update r3-s6
Juniper ≫ Junos Version 19.4 Update r3-s7
Juniper ≫ Junos Version 19.4 Update r3-s8
Juniper ≫ Junos Version 20.2 Update -
Juniper ≫ Junos Version 20.2 Update r1
Juniper ≫ Junos Version 20.2 Update r1-s1
Juniper ≫ Junos Version 20.2 Update r1-s2
Juniper ≫ Junos Version 20.2 Update r1-s3
Juniper ≫ Junos Version 20.2 Update r2
Juniper ≫ Junos Version 20.2 Update r2-s1
Juniper ≫ Junos Version 20.2 Update r2-s2
Juniper ≫ Junos Version 20.2 Update r2-s3
Juniper ≫ Junos Version 20.2 Update r3
Juniper ≫ Junos Version 20.2 Update r3-s1
Juniper ≫ Junos Version 20.2 Update r3-s2
Juniper ≫ Junos Version 20.2 Update r3-s3
Juniper ≫ Junos Version 20.2 Update r3-s4
Juniper ≫ Junos Version 20.3 Update -
Juniper ≫ Junos Version 20.3 Update r1
Juniper ≫ Junos Version 20.3 Update r1-s1
Juniper ≫ Junos Version 20.3 Update r1-s2
Juniper ≫ Junos Version 20.3 Update r2
Juniper ≫ Junos Version 20.3 Update r2-s1
Juniper ≫ Junos Version 20.3 Update r3
Juniper ≫ Junos Version 20.3 Update r3-s1
Juniper ≫ Junos Version 20.4 Update -
Juniper ≫ Junos Version 20.4 Update r1
Juniper ≫ Junos Version 20.4 Update r1-s1
Juniper ≫ Junos Version 20.4 Update r2
Juniper ≫ Junos Version 20.4 Update r2-s1
Juniper ≫ Junos Version 20.4 Update r2-s2
Juniper ≫ Junos Version 20.4 Update r3
Juniper ≫ Junos Version 21.1 Update -
Juniper ≫ Junos Version 21.1 Update r1
Juniper ≫ Junos Version 21.1 Update r1-s1
Juniper ≫ Junos Version 21.1 Update r2
Juniper ≫ Junos Version 21.1 Update r2-s1
Juniper ≫ Junos Version 21.1 Update r2-s2
Juniper ≫ Junos Version 21.2 Update -
Juniper ≫ Junos Version 21.2 Update r1
Juniper ≫ Junos Version 21.2 Update r1-s1
Juniper ≫ Junos Version 21.2 Update r2
Juniper ≫ Junos Version 21.3 Update -
Juniper ≫ Junos Version 21.3 Update r1
Juniper ≫ Junos Version 21.3 Update r1-s1
Juniper ≫ Junos Version 21.3 Update r1-s2
Juniper ≫ Junos Os Evolved Version < 20.4
Juniper ≫ Junos Os Evolved Version 20.4 Update -
Juniper ≫ Junos Os Evolved Version 20.4 Update r1
Juniper ≫ Junos Os Evolved Version 20.4 Update r1-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r1-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s1
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s2
Juniper ≫ Junos Os Evolved Version 20.4 Update r2-s3
Juniper ≫ Junos Os Evolved Version 20.4 Update r3
Juniper ≫ Junos Os Evolved Version 21.1 Update r1
Juniper ≫ Junos Os Evolved Version 21.1 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.1 Update r2
Juniper ≫ Junos Os Evolved Version 21.1 Update r3
Juniper ≫ Junos Os Evolved Version 21.1 Update r3-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update -
Juniper ≫ Junos Os Evolved Version 21.2 Update r1
Juniper ≫ Junos Os Evolved Version 21.2 Update r1-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r2
Juniper ≫ Junos Os Evolved Version 21.2 Update r2-s1
Juniper ≫ Junos Os Evolved Version 21.2 Update r2-s2
Juniper ≫ Junos Os Evolved Version 21.3 Update -
Juniper ≫ Junos Os Evolved Version 21.3 Update r1
Juniper ≫ Junos Os Evolved Version 21.3 Update r1-s1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.102
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Juniper 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://kb.juniper.net/JSA69896
Vendor Advisory