CVE-2022-22175: Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed

Published Jan 19, 2022

Updated

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.

Affected Software

57 affected components

Juniper Junos=20.4-r1

Juniper Junos=20.4-r1-s1

Juniper Junos=20.4-r2

Juniper Junos=20.4-r2-s1

Juniper Junos=20.4-r2-s2

Juniper Junos=20.4-r3

Juniper Junos=21.1-r1

Juniper Junos=21.1-r1-s1

Juniper Junos=21.1-r2

Juniper Junos=21.1-r2-s1

Juniper Junos=21.2-r1

Juniper Junos=21.2-r1-s1

Juniper Junos=21.3-r1

Juniper MX10

Juniper Mx10000

Juniper MX10003

Juniper MX10008

Juniper MX10016

Juniper MX104

Juniper MX150

Juniper MX2008

Juniper MX2010

Juniper MX2020

Juniper MX204

Juniper MX240

Juniper Mx40

Juniper MX480

Juniper Mx5

Juniper Mx80

Juniper MX960

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX1500

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper Srx240h2

Juniper SRX300

Juniper SRX320

Juniper SRX340

Juniper SRX3400

Juniper SRX345

Juniper SRX3600

Juniper Srx380

Juniper SRX4000

Juniper SRX4100

Juniper SRX4200

Juniper SRX4600

Juniper SRX5000

Juniper SRX5400

Juniper SRX550

Juniper Srx550 Hm

Juniper SRX550m

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Remediation

Information

The following software releases have been updated to resolve this specific issue: 20.4R3-S1, 21.1R2-S2, 21.1R3, 21.2R1-S2, 21.2R2, 21.3R1-S1, 21.3R2, 21.4R1, and all subsequent releases.

Event History

Jan 19, 2022

CVE Published

via MITRE·12:21 AM

Data Sourced

via MITRE·12:21 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2022-22175.

What is the severity of CVE-2022-22175?

The severity of CVE-2022-22175 is high with a CVSS score of 7.5.

How does CVE-2022-22175 affect Juniper Networks Junos OS?

CVE-2022-22175 affects Juniper Networks Junos OS on MX Series and SRX Series.

How can an attacker exploit CVE-2022-22175?

An unauthenticated networked attacker can exploit CVE-2022-22175 by causing a flowprocessing daemon crash in the SIP ALG, leading to a Denial of Service (DoS).

How can I fix CVE-2022-22175?

To fix CVE-2022-22175, it is recommended to upgrade to a fixed version of Juniper Networks Junos OS.