Skip to content
OpenAdvisories
Medium WID-SEC-2022-2393 1 CVE

Juniper JUNOS: Schwachstelle ermöglicht Denial of Service

Published Dec 22, 2022 · Updated Dec 22, 2022 · de-DE

Vendor: Juniper Networks Product: Junos Product: JUNOS 22.3R1 Product: JUNOS 22.3R1-EVO

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Juniper JUNOS ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.

Vulnerabilities 1

  • High 7.5
    CVE-2022-22184

    Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1

    An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). If a BGP update message is received over an …

    Juniper Networks Junos OS Junos OS Evolved Network devices

Revision history

  1. #1

    Initiale Fassung

References

  • Juniper Security Advisory vom 2022-12-22
    https://supportportal.juniper.net/s/article/2022-12-Out-of-Cycle-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-BGP-session-will-flap-upon-receipt-of-a-specific-optional-transitive-attribute-in-version-22-3R1-CVE-2022-22184