CVE-2022-22217

CVE-2022-22217 affects Juniper Junos OS on QFX10K Series switches (QFX10002/10008/10016). The root cause is an improper check that allows malformed MLD packets looping on a multi-homed ESI with VXLAN to be forwarded back to the peer, violating split horizon and causing a Denial of Service. Affect...

CVE-2022-22216

CVE-2022-22216 is a memory-disclosure vulnerability in Juniper Junos OS PFE affecting PTX1000/10000 Series and QFX10000/PTX5000 Series. The root cause is Etherleak: some Ethernet frames are not reliably padded, allowing an adjacent attacker to read fragments of system memory or data from previous...

CVE-2022-22216 Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000...

CVE-2022-22215

CVE-2022-22215 describes a Denial of Service in Junos OS and Junos OS Evolved due to a missing release of file descriptors/handles after a gRPC connection ends. The root cause is that /var/run/.env files may not be deleted when a gRPC session terminates, potentially exhausting inodes. Affected pr...

CVE-2022-22215 Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion

A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...

CVE-2022-22214 Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE crash and thereby a Denial of Service DoS. An FPC will crash and reboot after receiving a specific transit IPv6 packet over...

CVE-2022-22214

CVE-2022-22214 describes an improper input validation in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can trigger a specific transit IPv6 packet over MPLS that causes an FPC to crash and reboot, with continued receipt leading to a sust...

CVE-2022-22213

CVE-2022-22213 affects Juniper Networks Junos OS and Junos OS Evolved. A vulnerability in the Routing Protocol Daemon (RPD) handling of undefined values can allow an unauthenticated, network-based attacker to crash the RPD by sending a crafted BGP update while the host is under heavy load, leadin...

CVE-2022-22213 Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update

A vulnerability in Handling of Undefined Values in the routing protocol daemon RPD process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the RPD process by sending a specific BGP update while the system is under heavy load, leading ...

CVE-2022-22212

CVE-2022-22212 – Juniper Junos OS Evolved (PFE DoS) . The issue is an Allocation of Resources Without Limits or Throttling in the Packet Forwarding Engine (PFE) that allows an unauthenticated network attacker to cause a sustained Denial of Service by driving hostbound traffic on Junos OS Evolved ...

CVE-2022-22212 Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops

An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved allows unauthenticated network based attacker to cause a Denial of Service DoS. On all Junos Evolved platforms hostbound protocols will be impacted by a...

CVE-2022-22210

CVE-2022-22210 affects Junos OS on QFX5000 and MX Series. A NULL pointer dereference in the Packet Forwarding Engine (PFE) L2ALM path crashes when a specific VXLAN packet is processed, causing an FPC reboot and sustained DoS for adjacent attackers. Affected versions: QFX5000/MX Series 20.3 prior ...

CVE-2022-22209

CVE-2022-22209 describes a memory-leak DoS in Juniper Junos OS kernel KRT handling, caused by interface flaps or route churn that can desynchronize RIB and FIB, leading to ENOMEM and inability to add new routes. Affected are Junos OS 21.2 before 21.2R3; 21.3 before 21.3R2-S1, 21.3R3; 21.4 before ...

CVE-2022-22207 Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash

A Use After Free vulnerability in the Advanced Forwarding Toolkit AFT manager process aftmand of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a kernel crash due to intensive polling of Abstracted Fabric AF interface statistics and thereby a Denial of Service DoS...

CVE-2022-22207

CVE-2022-22207 is a Use After Free vulnerability in Juniper Networks Junos OS, affecting the MX Series with affected AFT aftmand processing. The root cause is intensive polling of AF interface statistics, which can crash the kernel and cause a Denial of Service. Impact is a sustained DoS due to r...

CVE-2022-22206 Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search

A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service DoS. The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search feature of UTM Unified Threat...

CVE-2022-22206

The CVE-2022-22206 issue is a buffer overflow in the PFE of Juniper Networks Junos OS on SRX series (Enhanced Web Filtering safe-search). An unauthenticated network attacker can trigger a Denial of Service by sending specific traffic, causing the PFE to crash and sustain DoS if traffic continues....

CVE-2022-22205

CVE-2022-22205 affects Juniper Networks Junos OS on SRX Series via a memory leak in the APBR/AppQoE pathway of the PFE, causing DoS under specific traffic when APBR is enabled and no AppQoE SLA rule is configured. Affected are SRX releases: 20.3 before 20.3R3-S2; 20.4 before 20.4R3-S2; 21.1 befor...

CVE-2022-22205 Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario

A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience appqoe subsystem of the PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated network based attacker to cause a Denial of Service DoS. Upon receiving specific traffic a...

CVE-2022-22204 Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic

An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...