SB2022101729 - RPD memory leak in Junos OS
Published: October 17, 2022
Security Bulletin ID
SB2022101729
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2022-22228)
The vulnerability allows a remote attacker to perform DoS attack on the target system.
The vulnerability exists due memory leak in the routing protocol daemon (rpd). A remote attacker can send specially crafted IPv6 packets to any configured IPv6 address on the device, trigger RPD memory leak and perform denial of service attack.
Remediation
Install update from vendor's website.