CVE-2022-22171: Junos OS: Specific packets over VXLAN cause FPC reset
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect versions of Junos OS prior to 19.4R1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22171?
CVE-2022-22171 has been classified with a severity rating that indicates it can lead to a Denial of Service condition.
How do I fix CVE-2022-22171?
To fix CVE-2022-22171, apply the recommended patches and updates provided by Juniper Networks for affected Junos OS versions.
What versions of Junos are affected by CVE-2022-22171?
CVE-2022-22171 affects multiple Junos OS versions including 19.4-r1, 20.1-r1, 20.2-r1, 20.3-r1, and 21.1-r1 among others.
What kind of attack can exploit CVE-2022-22171?
CVE-2022-22171 can be exploited by unauthenticated attackers sending specific packets over VXLAN to cause a Denial of Service.
Is there a workaround for CVE-2022-22171?
While the most effective mitigation is to apply the patches, network configurations may also be adjusted to limit exposure to the vulnerability.