A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On SRX Series If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific transit traffic is processed the PFE will crash and restart. This issue affects Juniper Networks Junos OS: 21.4 versions prior to 21.4R1-S2, 21.4R2 on SRX Series; 22.1 versions prior to 22.1R1-S1, 22.1R2 on SRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 21.4R1.
References
| Link | Resource |
|---|---|
| https://kb.juniper.net/JSA69886 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Oct 2022, 17:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://kb.juniper.net/JSA69886 - Vendor Advisory | |
| CWE | CWE-476 | |
| First Time |
Juniper srx5600
Juniper srx650 Juniper srx240 Juniper srx4600 Juniper srx210 Juniper srx240h2 Juniper srx550m Juniper srx380 Juniper srx3400 Juniper srx340 Juniper srx4000 Juniper srx220 Juniper srx550 Juniper srx1400 Juniper srx110 Juniper srx5400 Juniper srx100 Juniper srx4100 Juniper srx5000 Juniper srx345 Juniper srx5800 Juniper srx4200 Juniper Juniper junos Juniper srx550 Hm Juniper srx3600 Juniper srx320 Juniper srx1500 Juniper srx300 Juniper srx240m |
|
| CPE | cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:* cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:* cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:* cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:* cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* |
18 Oct 2022, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-18 03:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-22232
Mitre link : CVE-2022-22232
CVE.ORG link : CVE-2022-22232
JSON object : View
Products Affected
juniper
- srx1400
- srx550_hm
- srx1500
- srx5600
- srx340
- srx345
- srx220
- srx550m
- srx5800
- junos
- srx300
- srx4100
- srx3400
- srx240h2
- srx5000
- srx550
- srx240m
- srx320
- srx650
- srx240
- srx210
- srx110
- srx4000
- srx4200
- srx380
- srx3600
- srx5400
- srx100
- srx4600
CWE
CWE-476
NULL Pointer Dereference