CVE-2022-22250 In Junos OS and Junos OS Evolved, an attacker can cause a DoS by controlling a resource through its lifetime.

19.3R3-S5; 19.4R2; 20.2R3-S4; 20.3R3-S3; 20.4R3-S3; 21.1R3-S1; 21.2R3; 21.3R2; 21.4R1-S1; 21.4R2. If a device is configured in Active- Active topology with Active- Active Virtual Routing and Forwarding instance configured on both Device A and Device B. If Device A receives a Delete request with the remote MAC while Device B is configured to learn locally and respond, the memory may be corrupted in Device A. This may lead to a crash or reboot of the device. This issue is exploitable if Device A is in Active- Active topology. This issue can be exploited remotely. In an EVPN-MPLS scenario, if a device in an Active- Active topology is configured with Active- Active Virtual Routing and Forwarding instance on both Device A and Device B and Device A receives a Delete request with the remote MAC while Device B is configured to learn locally and respond, the memory may be corrupted in Device A. This may lead to a crash or reboot of the device. This issue is exploitable if Device A is in Active- Active topology. This issue can be exploited remotely. All versions of Junos OS 17.3R1 and later versions prior to 19.2

References:

CVE-2022-22250
19.3R3-S5; 19.4R2; 20.2R3-S4; 20.3R3-S3; 20.4R3-S3; 21.1R3-S1; 21.2R3; 21.3R2; 21.4R1-S1; 21.4R2
If a device is configured in Active- Active topology with Active- Active Virtual Routing and Forwarding instance configured on both Device A and Device B, if Device A receives a Delete request with the remote MAC while Device B is configured to learn locally and respond, the memory may be corrupted in Device A

Description

A vulnerability in the Junos operating system allows an attacker to corrupt memory on an affected device. The vulnerability exists because the Junos operating system is vulnerable to memory corruption when a device is configured in Active-Active topology with Active-Active Virtual Routing and Forwarding instance configured on both Device A and Device B. If Device A receives a Delete request with the remote MAC while Device B is configured to learn locally and respond, the memory may be corrupted in Device A. This may lead to a crash or reboot of the device. This issue is exploitable if Device A is in Active-Active topology. This issue can be exploited remotely. All versions of Junos OS 17.3R1 and later versions prior to 19.2 are vulnerable .
The vulnerability was found by David Wagner, who reported it to Micro Focus on September 1, 2016.

Summary

A device configured in Active- Active topology with Active- Active Virtual Routing and Forwarding instance configured on both Device A and Device B. If Device A receives a Delete request with the remote MAC while Device B is configured to learn locally and respond, the memory may be corrupted in Device A. This may lead to a crash or reboot of the device. This issue is exploitable if Device A is in Active- Active topology. This issue can be exploited remotely.

Products and Versions Affected

All versions of Junos OS 17.3R1 and later versions prior to 19.2

Facebook: One of the most popular social media platforms.
One of the most popular social media platforms is Facebook. People are constantly posting on their feed or on their business page, which means there are loads of opportunities for you to advertise on Facebook. And if you're not advertising on it yet, now is the time to start! There are many strategies you can use with your ads. But one strategy that stands out is using pictures in your ad campaigns.
The Benefits of Advertising on Facebook
Facebook is an excellent platform for advertising because there are so many different ways to do it. Facebook ads can be targeted to a specific demographic or geographic area, or they can be on an easier flow on the internet. With Facebook, you can target your audience by location, age, gender, interests, and more. By targeting your ad to a specific group of people, you'll be spending less money on clicks that don't convert into sales. These ads get better conversion rates because you'll spend less money while still getting better results. You can use pictures in your ad campaigns on Facebook as people respond well to pictures.  People are more likely to click through when they see something visually appealing than if they see text only.

Supported Devices

Device A
Device B
All versions of Junos OS 17.3R1 and later versions prior to 19.2

Timeline

Published on: 10/18/2022 03:15:00 UTC
Last modified on: 10/21/2022 17:24:00 UTC

References