CVE-2022-22203: Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot

Published Jul 20, 2022

Updated

An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platforms, the fxpc process will crash followed by the FPC reboot upon receipt of a specific hostbound packet. Continued receipt of these specific packets will create a sustained Denial of Service (DoS) condition. This issue only affects Juniper Networks Junos OS 19.4 version 19.4R3-S4.

Affected Software

11 affected components

Juniper Junos=19.4-r3-s4

Juniper EX4600

Juniper EX4650

Juniper QFX5100

Juniper QFX5110

Juniper QFX5120

Juniper Qfx5130

Juniper QFX5200

Juniper QFX5210

Juniper QFX5220

Juniper Qfx5700

Remediation

Information

The following software releases have been updated to resolve this specific issue: 19.4R3-S5, and all subsequent releases.

Event History

Jul 20, 2022

CVE Published

via MITRE·02:11 PM

Data Sourced

via MITRE·02:11 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-22203?

CVE-2022-22203 is an Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS that allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS).

Which software is affected by CVE-2022-22203?

Juniper JUNOS version 19.4-r3-s4 is affected by CVE-2022-22203.

What is the severity of CVE-2022-22203?

CVE-2022-22203 has a severity level of medium.

How can I fix CVE-2022-22203?

To fix CVE-2022-22203, it is recommended to apply the necessary updates or patches provided by Juniper Networks.

Where can I find more information about CVE-2022-22203?

You can find more information about CVE-2022-22203 on the Juniper Networks knowledge base at https://kb.juniper.net/JSA69707.