CVE-2022-22185: Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet
A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated attacker to cause a Denial of Service (DoS) by sending a specific fragmented packet to the device, resulting in a flowd process crash, which is responsible for packet forwarding. Continued receipt and processing of this specific packet will create a sustained DoS condition. This issue only affects SRX Series when 'preserve-incoming-fragment-size' feature is enabled. This issue affects Juniper Networks Junos OS on SRX Series: 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect Juniper Networks Junos OS prior to 17.3R1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the risk associated with CVE-2022-22185?
CVE-2022-22185 presents a Denial of Service (DoS) vulnerability that could be exploited by an unauthenticated attacker to crash the flowd process.
How do I remediate CVE-2022-22185?
To fix CVE-2022-22185, upgrade Junos OS to a version that addresses this vulnerability as specified in the security advisory.
What devices are affected by CVE-2022-22185?
CVE-2022-22185 affects multiple versions of Junos OS, including versions 18.3, 18.4, 19.1, 19.2, 19.3, 19.4, and 20.1.
Is CVE-2022-22185 being actively exploited?
There have been reports of CVE-2022-22185 being actively exploited in the wild.
What impact may CVE-2022-22185 have on network availability?
Exploitation of CVE-2022-22185 can lead to network outages due to the crashing of key processes involved in packet forwarding.