CVE-2022-22236: Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash

Published Oct 18, 2022

Updated

An Access of Uninitialized Pointer vulnerability in SIP Application Layer Gateway (ALG) of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When specific valid SIP packets are received the PFE will crash and restart. This issue affects Juniper Networks Junos OS on SRX Series and MX Series: 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R2-S2, 21.3R3; 21.4 versions prior to 21.4R1-S2, 21.4R2; 22.1 versions prior to 22.1R1-S1, 22.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.

Affected Software

85 affected components

Juniper Junos=20.4

Juniper Junos=20.4-r1

Juniper Junos=20.4-r1-s1

Juniper Junos=20.4-r2

Juniper Junos=20.4-r2-s1

Juniper Junos=20.4-r2-s2

Juniper Junos=20.4-r3

Juniper Junos=20.4-r3-s1

Juniper Junos=20.4-r3-s2

Juniper Junos=20.4-r3-s3

Juniper Junos=21.1

Juniper Junos=21.1-r1

Juniper Junos=21.1-r1-s1

Juniper Junos=21.1-r2

Juniper Junos=21.1-r2-s1

Juniper Junos=21.1-r2-s2

Juniper Junos=21.1-r3

Juniper Junos=21.1-r3-s1

Juniper Junos=21.2

Juniper Junos=21.2-r1

Juniper Junos=21.2-r1-s1

Juniper Junos=21.2-r1-s2

Juniper Junos=21.2-r2

Juniper Junos=21.2-r2-s1

Juniper Junos=21.2-r2-s2

Juniper Junos=21.2-r3

Juniper Junos=21.2-r3-s1

Juniper Junos=21.3

Juniper Junos=21.3-r1

Juniper Junos=21.3-r1-s1

Juniper Junos=21.3-r1-s2

Juniper Junos=21.3-r2

Juniper Junos=21.3-r2-s1

Juniper Junos=21.3-r2-s2

Juniper Junos=21.3-r3

Juniper Junos=21.3-r3-s1

Juniper Junos=21.4

Juniper Junos=21.4-r1

Juniper Junos=21.4-r1-s1

Juniper Junos=22.1-r1

Juniper MX10

Juniper Mx10000

Juniper MX10003

Juniper MX10008

Juniper MX10016

Juniper MX104

Juniper MX150

Juniper MX2008

Juniper MX2010

Juniper MX2020

Juniper MX204

Juniper MX240

Juniper Mx40

Juniper MX480

Juniper Mx5

Juniper Mx80

Juniper MX960

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX1500

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper Srx240h2

Juniper SRX240m

Juniper SRX300

Juniper SRX320

Juniper SRX340

Juniper SRX3400

Juniper SRX345

Juniper SRX3600

Juniper Srx380

Juniper SRX4000

Juniper SRX4100

Juniper SRX4200

Juniper SRX4600

Juniper SRX5000

Juniper SRX5400

Juniper SRX550

Juniper Srx550 Hm

Juniper SRX550m

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Remediation

Information

The following software releases have been updated to resolve this specific issue: 20.4R3-S4, 21.1R3-S2, 21.2R3-S2, 21.3R2-S2, 21.3R3, 21.4R1-S2, 21.4R2, 22.1R1-S1, 22.1R2, 22.2R1, and all subsequent releases.

Event History

Oct 18, 2022

CVE Published

via MITRE·02:46 AM

Data Sourced

via MITRE·02:46 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-22236?

CVE-2022-22236 has been classified as a high-severity vulnerability due to its potential to cause Denial of Service.

How does CVE-2022-22236 affect Juniper Networks devices?

CVE-2022-22236 allows an unauthenticated, network-based attacker to exploit a vulnerability in the SIP Application Layer Gateway of Junos OS.

How do I fix CVE-2022-22236?

To fix CVE-2022-22236, you should upgrade your Junos OS to the latest secure version as provided by Juniper Networks.

Which versions of Junos OS are affected by CVE-2022-22236?

CVE-2022-22236 affects Junos OS versions 20.4 and 21.1 series, among others, as specified by the Juniper advisory.

Is CVE-2022-22236 a remote attack vector?

Yes, CVE-2022-22236 can be exploited remotely, allowing attackers to conduct Denial of Service attacks without authentication.