Improper check for unusual or exceptional conditions in Junos OS and Junos OS Evolved - CVE-2022-22196
Published: April 13, 2022
Vulnerability identifier: #VU82442
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-22196
CWE-ID: CWE-754
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper check for unusual or exceptional conditions error in the Routing Protocol Daemon (rpd). A remote non-authenticated attacker can cause a Denial of Service (DoS).
The rpd CPU spikes to 100% after a malformed ISIS TLV has been received which will lead to processing issues of routing updates and in turn traffic impact.
Affected software
Junos OS
Junos OS Evolved
Junos OS Evolved
How to mitigate CVE-2022-22196
Install updates from vendor's website.
Junos OS - addressed in versions 19.3R3-S4, 19.4R2-S6, 19.4R3-S6, 20.1R3-S2, 20.2R3-S3, 20.3R3-S1, 20.4R3, 21.1R3, 21.2R2, 21.3R1
Junos OS Evolved - addressed in versions 20.4R3-S3-EVO, 21.2R2-EVO, 21.3R1-EVO
Junos OS Evolved - addressed in versions 20.4R3-S3-EVO, 21.2R2-EVO, 21.3R1-EVO