Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2022-22211
Analyzed
More InfoOfficial Page
Source-sirt@juniper.net
View Known Exploited Vulnerability (KEV) details
Published At-18 Oct, 2022 | 03:15
Updated At-21 Oct, 2022 | 18:10

A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service (DoS). Continuously polling the SNMP jnxCosQstatTable causes the FPC to run out of GUID space, causing a Denial of Service to the FPC resources. When the FPC runs out of the GUID space, you will see the following syslog messages. The evo-aftmand-bt process is asserting. fpc1 evo-aftmand-bt[17556]: %USER-3: get_next_guid: Ran out of Guid Space start 1748051689472 end 1752346656767 fpc1 audit[17556]: %AUTH-5: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17556 comm="EvoAftManBt-mai" exe="/usr/sbin/evo-aftmand-bt" sig=6 fpc1 kernel: %KERN-5: audit: type=1701 audit(1648567505.119:57): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17556 comm="EvoAftManBt-mai" exe="/usr/sbin/evo-aftmand-bt" sig=6 fpc1 emfd-fpa[14438]: %USER-5: Alarm set: APP color=red, class=CHASSIS, reason=Application evo-aftmand-bt fail on node Fpc1 fpc1 emfd-fpa[14438]: %USER-3-EMF_FPA_ALARM_REP: RaiseAlarm: Alarm(Location: /Chassis[0]/Fpc[1] Module: sysman Object: evo-aftmand-bt:0 Error: 2) reported fpc1 sysepochman[12738]: %USER-5-SYSTEM_REBOOT_EVENT: Reboot [node] [ungraceful reboot] [evo-aftmand-bt exited] The FPC resources can be monitored using the following commands: user@router> start shell [vrf:none] user@router-re0:~$ cli -c "show platform application-info allocations app evo-aftmand-bt" | grep ^fpc | grep -v Route | grep -i -v Nexthop | awk '{total[$1] += $5} END { for (key in total) { print key " " total[key]/4294967296 }}' Once the FPCs become unreachable they must be manually restarted as they do not self-recover. This issue affects Juniper Networks Junos OS Evolved on PTX Series: All versions prior to 20.4R3-S4-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO version 21.2R1-EVO and later versions; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R2-EVO; 22.1-EVO versions prior to 22.1R2-EVO.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CPE Matches

Juniper Networks, Inc.
juniper
>>junos_os_evolved>>Versions before 20.4(exclusive)
cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:-:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r1-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r2-s3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>20.4
cpe:2.3:o:juniper:junos_os_evolved:20.4:r3-s3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.1
cpe:2.3:o:juniper:junos_os_evolved:21.1:-:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.1
cpe:2.3:o:juniper:junos_os_evolved:21.1:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.1
cpe:2.3:o:juniper:junos_os_evolved:21.1:r1-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.1
cpe:2.3:o:juniper:junos_os_evolved:21.1:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.1
cpe:2.3:o:juniper:junos_os_evolved:21.1:r3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.1
cpe:2.3:o:juniper:junos_os_evolved:21.1:r3-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:-:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r1-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r2-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.2
cpe:2.3:o:juniper:junos_os_evolved:21.2:r3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.3
cpe:2.3:o:juniper:junos_os_evolved:21.3:-:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.3
cpe:2.3:o:juniper:junos_os_evolved:21.3:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.3
cpe:2.3:o:juniper:junos_os_evolved:21.3:r1-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.3
cpe:2.3:o:juniper:junos_os_evolved:21.3:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.3
cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.3
cpe:2.3:o:juniper:junos_os_evolved:21.3:r2-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.4
cpe:2.3:o:juniper:junos_os_evolved:21.4:-:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.4
cpe:2.3:o:juniper:junos_os_evolved:21.4:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.4
cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>21.4
cpe:2.3:o:juniper:junos_os_evolved:21.4:r1-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>22.1
cpe:2.3:o:juniper:junos_os_evolved:22.1:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>22.1
cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_os_evolved>>22.1
cpe:2.3:o:juniper:junos_os_evolved:22.1:r1-s2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx1000>>-
cpe:2.3:h:juniper:ptx1000:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx1000-72q>>-
cpe:2.3:h:juniper:ptx1000-72q:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10000>>-
cpe:2.3:h:juniper:ptx10000:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10001>>-
cpe:2.3:h:juniper:ptx10001:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10001-36mr>>-
cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx100016>>-
cpe:2.3:h:juniper:ptx100016:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10002>>-
cpe:2.3:h:juniper:ptx10002:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10002-60c>>-
cpe:2.3:h:juniper:ptx10002-60c:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10003>>-
cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>ptx10003_160c>>-
cpe:2.3:h:juniper:ptx10003_160c:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-770Primarynvd@nist.gov
CWE-770Secondarysirt@juniper.net
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://kb.juniper.net/JSA69916sirt@juniper.net
Permissions Required
Change History
0Changes found

Details not found