CVE-2022-22169

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1R7-S11 Junos OS versions 18.3 prior to 18.3R3-S6 Junos OS versions 18.4 prior to 18.4R2-S9, 18.4R3-S10 Junos OS versions 19.1 prior to 19.1R2-S3, 19.1R3-S7 Junos OS versions 19.2 prior to 19.2R1-S7, 19.2R3-S4 Junos OS versions 19.3 prior to 19.3R2-S7, 19.3R3-S4 Junos OS versions 19.4 prior to 19.4R3-S6 Junos OS versions 20.1 prior to 20.1R3-S1 Junos OS versions 20.2 prior to 20.2R3-S3 Junos OS versions 20.3 prior to 20.3R3-S1 Junos OS versions 20.4 prior to 20.4R2-S2, 20.4R3 Junos OS versions 21.1 prior to 21.1R3 Junos OS versions 21.2 prior to 21.2R1-S1, 21.2R2 Junos OS Evolved versions prior to 21.2R2-EVO

Description The issue is related to an improper initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This vulnerability can be exploited by an attacker who sends specific packets in certain orders and at specific timings, causing the OSPFv3 to unexpectedly enter graceful-restart (GR helper mode) and resulting in a Denial of Service (DoS). The OSPFv3 neighbor adjacency may become stuck in the "INIT" state. Log file messages can indicate compromise when traceoptions for OSPFv3 are enabled.

Recommendations For Junos OS versions prior to 15.1R7-S11, update to 15.1R7-S11 or later. For Junos OS versions 18.3 prior to 18.3R3-S6, update to 18.3R3-S6 or later. For Junos OS versions 18.4 prior to 18.4R2-S9, 18.4R3-S10, update to 18.4R2-S9, 18.4R3-S10 or later. For Junos OS versions 19.1 prior to 19.1R2-S3, 19.1R3-S7, update to 19.1R2-S3, 19.1R3-S7 or later. For Junos OS versions 19.2 prior to 19.2R1-S7, 19.2R3-S4, update to 19.2R1-S7, 19.2R3-S4 or later. For Junos OS versions 19.3 prior to 19.3R2-S7, 19.3R3-S4, update to 19.3R2-S7, 19.3R3-S4 or later. For Junos OS versions 19.4 prior to 19.4R3-S6, update to 19.4R3-S6 or later. For Junos OS versions 20.1 prior to 20.1R3-S1, update to 20.1R3-S1 or later. For Junos OS versions 20.2 prior to 20.2R3-S3, update to 20.2R3-S3 or later. For Junos OS versions 20.3 prior to 20.3R3-S1, update to 20.3R3-S1 or later. For Junos OS versions 20.4 prior to 20.4R2-S2, 20.4R3, update to 20.4R2-S2, 20.4R3 or later. For Junos OS versions 21.1 prior to 21.1R3, update to 21.1R3 or later. For Junos OS versions 21.2 prior to 21.2R1-S1, 21.2R2, update to 21.2R1-S1, 21.2R2 or later. For Junos OS Evolved versions prior to 21.2R2-EVO, update to 21.2R2-EVO or later.