Juniper Junos OS Packet Forwarding Engine improper validation of specified index, position, or offset in input

Summaryinfo

A vulnerability was found in Juniper Junos OS. It has been classified as problematic. Affected is an unknown function of the component Packet Forwarding Engine. This manipulation causes improper validation of specified index, position, or offset in input. This vulnerability is handled as CVE-2022-22201. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Juniper Junos OS (Router Operating System) (unknown version). It has been declared as critical. Affected by this vulnerability is an unknown code block of the component Packet Forwarding Engine. The manipulation with an unknown input leads to a improper validation of specified index, position, or offset in input vulnerability. The CWE definition for the vulnerability is CWE-1285. The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties. As an impact it is known to affect availability. The summary by CVE is:

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). On SRX5000 Series with SPC3, SRX4000 Series, and vSRX, when PowerMode IPsec is configured and a malformed ESP packet matching an established IPsec tunnel is received the PFE crashes. This issue affects Juniper Networks Junos OS on SRX5000 Series with SPC3, SRX4000 Series, and vSRX: All versions prior to 19.4R2-S6, 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S4; 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R1-S2, 21.3R2.

The weakness was released 10/18/2022 as JSA69900. It is possible to read the advisory at kb.juniper.net. This vulnerability is known as CVE-2022-22201 since 12/21/2021. The technical details are unknown and an exploit is not publicly available.

Upgrading eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Juniper

Name

• Junos OS

License

• commercial

Website

• Vendor: https://www.juniper.net/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion