Juniper Junos OS Evolved on PTX Kernel improper validation of syntactic correctness of input

Summaryinfo

A vulnerability classified as problematic has been found in Juniper Junos OS Evolved on PTX. This issue affects some unknown processing of the component Kernel. This manipulation causes improper validation of syntactic correctness of input. This vulnerability is registered as CVE-2022-22192. The attack requires access to the local network. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in Juniper Junos OS Evolved on PTX (Router Operating System) (version now known). Affected by this vulnerability is some unknown processing of the component Kernel. The manipulation with an unknown input leads to a improper validation of syntactic correctness of input vulnerability. The CWE definition for the vulnerability is CWE-1286. The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax. As an impact it is known to affect availability. The summary by CVE is:

An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). When an incoming TCP packet destined to the device is malformed there is a possibility of a kernel panic. Only TCP packets destined to the ports for BGP, LDP and MSDP can trigger this. This issue only affects PTX10004, PTX10008, PTX10016. No other PTX Series devices or other platforms are affected. This issue affects Juniper Networks Junos OS Evolved: 20.4-EVO versions prior to 20.4R3-S4-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R3-EVO; 22.1-EVO versions prior to 22.1R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO.

The weakness was published 10/18/2022 as JSA69915. The advisory is shared at kb.juniper.net. This vulnerability is known as CVE-2022-22192 since 12/21/2021. Neither technical details nor an exploit are publicly available.

Upgrading eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS Evolved

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion