First published: Tue Oct 18 2022(Updated: )
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated network-based attacker to cause a partial Denial of Service (DoS). On receipt of specific IPv6 transit traffic, Junos OS Evolved on ACX7100-48L, ACX7100-32C and ACX7509 sends this traffic to the Routing Engine (RE) instead of forwarding it, leading to increased CPU utilization of the RE and a partial DoS. This issue only affects systems configured with IPv6. This issue does not affect ACX7024 which is supported from 22.3R1-EVO onwards where the fix has already been incorporated as indicated in the solution section. This issue affects Juniper Networks Junos OS Evolved on ACX7100-48L, ACX7100-32C, ACX7509: 21.1-EVO versions prior to 21.1R3-S2-EVO; 21.2-EVO versions prior to 21.2R3-S2-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R1-S1-EVO, 21.4R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.1R1-EVO.
Credit: sirt@juniper.net
Affected Software | Affected Version | How to fix |
---|---|---|
Juniper Junos Os Evolved | =21.1 | |
Juniper Junos Os Evolved | =21.1-r1 | |
Juniper Junos Os Evolved | =21.1-r1-s1 | |
Juniper Junos Os Evolved | =21.1-r2 | |
Juniper Junos Os Evolved | =21.1-r3 | |
Juniper Junos Os Evolved | =21.1-r3-s1 | |
Juniper Junos Os Evolved | =21.2 | |
Juniper Junos Os Evolved | =21.2-r1 | |
Juniper Junos Os Evolved | =21.2-r1-s1 | |
Juniper Junos Os Evolved | =21.2-r1-s2 | |
Juniper Junos Os Evolved | =21.2-r2 | |
Juniper Junos Os Evolved | =21.2-r2-s1 | |
Juniper Junos Os Evolved | =21.2-r2-s2 | |
Juniper Junos Os Evolved | =21.2-r3 | |
Juniper Junos Os Evolved | =21.2-r3-s1 | |
Juniper Junos Os Evolved | =21.3 | |
Juniper Junos Os Evolved | =21.3-r1 | |
Juniper Junos Os Evolved | =21.3-r1-s1 | |
Juniper Junos Os Evolved | =21.3-r2 | |
Juniper Junos Os Evolved | =21.3-r2-s1 | |
Juniper Junos Os Evolved | =21.3-r2-s2 | |
Juniper Junos Os Evolved | =21.4 | |
Juniper Junos Os Evolved | =21.4-r1 | |
Juniper Acx7100-32c | ||
Juniper Acx7100-48l | ||
Juniper Acx7509 |
The following software releases have been updated to resolve this specific issue: 21.1R3-S2-EVO, 21.2R3-S2-EVO, 21.3R3-EVO, 21.4R1-S1-EVO, 21.4R2-EVO, 22.1R1-EVO, and all subsequent releases.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22227 refers to an Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series.
CVE-2022-22227 can allow an unauthenticated network-based attacker to cause a partial Denial of Service (DoS) on devices running Juniper Junos OS Evolved on ACX7000 Series.
CVE-2022-22227 has a severity rating of 5.3, which is considered medium.
Yes, Juniper Junos OS Evolved version 21.1 is affected by CVE-2022-22227.
To mitigate CVE-2022-22227 on Juniper Junos OS Evolved, it is recommended to update to a fixed version provided by Juniper Networks.