CVE-2022-22247 An Ingress TCP segment processing vulnerability in Juniper Networks Junos OS Evolved allows a network-based attacker to send a crafted TCP segment to the device, triggering a kernel panic and Denial of Service.

Improper handling of TCP packets with a SYN flag enabled (SYN-Only) can result in a Denial of Service (DoS) condition. An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled. An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled. CVE-2018-2767: Improper Handling of TCP Packets with a SYN Flag Enabled An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled. An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled. CVE-2018-2766: Improper Handling of TCP Packets with a SYN Flag Enabled An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic

Vulnerability Summary

CVE-2022-22247: Improper Handling of TCP Packets with a SYN Flag Enabled An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled.
CVE-2018-2767: Improper Handling of TCP Packets with a SYN Flag Enabled An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled.
CVE-2018-2766: Improper Handling of TCP Packets with a SYN Flag Enabled An attacker can send a crafted TCP packet with a single ACK chunk, which will trigger a kernel panic and potentially result in a Denial of Service (DoS) condition. This issue is due to improper handling of TCP packets with the SYN flag enabled.

Timeline

Published on: 10/18/2022 03:15:00 UTC
Last modified on: 10/18/2022 12:01:00 UTC

References

• https://kb.juniper.net/JSA69904
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-22247