csirt@kutim:~/threat-intel/cve/CVE-2022-22198

Katalog CVE

CVSS 7.5 · High EPSS 0,92%

Kerentanan Access of Uninitialized Pointer pada juniper junos. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX platforms, if the SIP ALG is enabled, an MS-MPC or MS-MIC, or SPC will crash if it receives a SIP message with a specific contact header format. This issue affects Juniper Networks Junos OS on MX Series and SRX Series: 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions prior to 20.4R1.

Rincian

Terbit di NVD
14 April 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-824: Access of Uninitialized Pointer
EPSS (30 hari)
0,92% peluang dieksploitasi; lebih tinggi dari 59,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos Versi 20.4 r1
juniper junos Versi 20.4 r1-s1
juniper junos Versi 20.4 r2
juniper junos Versi 20.4 r2-s1
juniper junos Versi 20.4 r2-s2
juniper junos Versi 21.1 r1
juniper junos Versi 21.1 r1-s1
juniper junos Versi 21.1 r2
juniper junos Versi 21.2 r1
juniper junos Versi 21.2 r1-s1
juniper junos Versi 21.2 r1-s2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.