CVE-2022-22236

The CVE-2022-22236 affects Juniper Junos OS on SRX/MX series, caused by an uninitialized pointer in the SIP Application Layer Gateway (ALG) that can crash the PFE and trigger DoS when specific SIP packets arrive. Affected versions include 20.4R3-S4 and earlier for 20.4, 21.1R3-S2 and earlier, 21....

CVE-2022-22249: Improper Control of a Resource Through its Lifetime

An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When there is a continuous mac move a memory corruption causes one or mo...

CVE-2022-22236: Access of Uninitialized Pointer

An Access of Uninitialized Pointer vulnerability in SIP Application Layer Gateway ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When specific valid SIP packets are received the PFE will crash and...

Juniper Junos OS Vulnerability (JSA69892)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69892 advisory. - An Access of Uninitialized Pointer vulnerability in SIP Application Layer Gateway ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated,...

Juniper Junos OS Vulnerability (JSA69906)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69906 advisory. - An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticate...

PT-2022-6117 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions prior to 15.1R7-S13 Juniper Networks Junos OS on MX Series version 19.1 versions prior to 19.1R3-S9 Juniper Networks Junos OS on MX Series version 19.2 versions prior to 19.2R3-S6 Juniper Networ...

GSD-2022-1006177 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init

meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006053 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init

meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005900 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init

meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005660 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init

meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34311 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A refcount leak was discovered in the meson mx socinfo init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description A refcount leak was discovered in the meson mx socinfo init function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.61, updat...

GSD-2022-1005339 meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init

meson-mx-socinfo: Fix refcount leak in mesonmxsocinfoinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.2 Description A refcount leak was discovered in the meson mx socinfo init function. The issue was introduced in version v4.15 and is fixed in Linux Kernel version v5.19.2. Recommendations For versions prior...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series and MX Series models is related to pointer arithmetic errors. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series and MX Series models is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to trigger service failures remotely...

Juniper Junos OS DoS (JSA69708)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69708 advisory. - An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos O...

CVE-2022-22210

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the...

CVE-2022-22210

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the...

Input validation

An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...

Design/Logic Flaw

A Use After Free vulnerability in the Advanced Forwarding Toolkit AFT manager process aftmand of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a kernel crash due to intensive polling of Abstracted Fabric AF interface statistics and thereby a Denial of Service DoS...