CVE-2022-22231 : An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Fo

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). On SRX Series if Unified Threat Management (UTM) Enhanced Content Filtering (CF) and AntiVirus (AV) are enabled together and the system processes specific valid transit traffic the Packet Forwarding Engine (PFE) will crash and restart. This issue affects Juniper Networks Junos OS 21.4 versions prior to 21.4R1-S2, 21.4R2 on SRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 21.4R1.

Published 2022-10-18 03:15:10

Updated 2023-06-27 18:20:31

Source Juniper Networks, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2022-22231

Juniper » Junos » Version: 21.4 Update R1
cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx4600 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
Juniper » Junos » Version: 21.4 Update R1-s1
cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx4600 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A
Juniper » Junos » Version: 21.4
cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx1500 » Version: N/A
When used together with: Juniper » Srx4100 » Version: N/A
When used together with: Juniper » Srx4200 » Version: N/A
When used together with: Juniper » Srx4600 » Version: N/A
When used together with: Juniper » Srx5400 » Version: N/A
When used together with: Juniper » Srx550 » Version: N/A
When used together with: Juniper » Srx5600 » Version: N/A
When used together with: Juniper » Srx5800 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-22231

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 37 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-22231

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	Juniper Networks, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-22231

CWE-252 Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Assigned by: nvd@nist.gov (Primary)
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)
CWE-690 Unchecked Return Value to NULL Pointer Dereference

The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.

Assigned by: sirt@juniper.net (Secondary)

References for CVE-2022-22231

https://kb.juniper.net/JSA69885

2022-10 Security Bulletin: Junos OS: SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash (CVE-2022-22231)
Vendor Advisory

Jump to

Vulnerability Details : CVE-2022-22231

Products affected by CVE-2022-22231

Exploit prediction scoring system (EPSS) score for CVE-2022-22231

CVSS scores for CVE-2022-22231

CWE ids for CVE-2022-22231

References for CVE-2022-22231