CVE-2022-22170

CVE-2022-22170 describes a vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS where a Missing Release of Resource after Effective Lifetime can allow an unauthenticated attacker to cause a Denial of Service by sending specific VXLAN packets. The issue causes a heap me...

CVE-2022-22170 Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset

A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service DoS by sending specific packets over VXLAN which cause heap memory to leak and on...

CVE-2022-22169

CVE-2022-22169 affects Juniper Networks Junos OS and Junos OS Evolved. An improper initialization in the routing protocol daemon (rpd) can cause OSPFv3 to enter graceful-restart GR helper mode when a attacker sends crafted packets in specific order/timing, potentially causing a DoS via a stalled ...

CVE-2022-22168

CVE-2022-22168 affects Juniper Networks Junos OS in the kernel, via improper validation of input, allowing an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime, ultimately causing an FPC reboot and DoS. Affected: Junos OS on vMX and MX150 across mul...

CVE-2022-22168 Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot

An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability. Continued exploitation of this vulnerability will eventually lead t...

CVE-2022-22167

CVE-2022-22167 describes a traffic classification vulnerability in Juniper Networks Junos OS on SRX Series gateways where enabling no-syn-check causes JDPI to misclassify certain TCP flows, leading the policy to permit traffic that should be denied via the pre-id-default-policy. Affected are SRX ...

CVE-2022-22166

CVE-2022-22166 affects Juniper Networks Junos OS rpd (routing protocol daemon). A DoS can be triggered by receiving a BGP update with a malformed SR-TE policy tunnel attribute when BGP update tracing is enabled, causing an rpd crash that does not propagate. Affected are Junos OS 20.4 versions pri...

CVE-2022-22164 Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.

An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be operating on the device, an administrator can...

CVE-2022-22164

The CVE describes an Improper Initialization in Juniper Networks Junos OS Evolved where a commit operation to disable Telnet does not take effect, leaving Telnet enabled. Affected are Junos OS Evolved releases prior to 20.4R2-S2-EVO; 21.1 (21.1R1-EVO) and later; and 21.2 releases prior to 21.2R2-...

CVE-2022-22163

CVE-2022-22163 : The Junos OS DHCP daemon (jdhcpd) has an improper input validation vulnerability that enables an adjacent unauthenticated attacker to crash jdhcpd and cause a Denial of Service (DoS) when a device is configured as a DHCPv6 local server with persistent storage enabled, by processi...

CVE-2022-22163 Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet

An Improper Input Validation vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service DoS. If a device is configured as DHCPv6 local server and persistent storage is enabled,...

CVE-2022-22162 Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in

A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this time, potential leading to a full compromise...

CVE-2022-22162

CVE-2022-22162 affects Juniper Networks Junos OS. The issue is a Information Disclosure/Privilege Elevation vulnerability in the CLI where a locally authenticated, low-privilege user can elevate privileges to the highest J-Web user, potentially leading to full device compromise. Affected {Juniper...

CVE-2022-22161 Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic

An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipte...

CVE-2022-22161

CVE-2022-22161 describes an Uncontrolled Resource Consumption vulnerability in the Juniper Networks Junos OS kernel. An unauthenticated network-based attacker can flood the out-of-band management port, causing 100% CPU usage and making the device unresponsive; continued floods yield a sustained D...

CVE-2022-22160

CVE-2022-22160 affects Juniper Junos OS MX Series where the subscriber management daemon (smgd) is vulnerable to an unchecked error condition. An unauthenticated adjacent attacker can trigger a crash of smgd (in environments with dual-stack session groups and a pp0 interface), causing the daemon ...

CVE-2022-22160 Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

An Unchecked Error Condition vulnerability in the subscriber management daemon smgd of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service DoS. In a subscriber management / broadband edge environment if a single session group...

CVE-2022-22159

CVE-2022-22159 affects Juniper Networks Junos OS NETISR network queue functionality. A crafted IPv4 ECMP unilist packet sequence can overload the routing protocol daemon (rpd) CPU to 100%, while FPCs continue forwarding, causing a sustained DoS. Affected Junos OS versions include 17.3R3-S9 throug...

CVE-2022-22157

Summary: CVE-2022-22157 describes a traffic-classification vulnerability in Juniper Networks Junos OS on SRX Series gateways where the Deep Packet Inspection (JDPI) rules can be bypassed when the device is configured with no-syn-check. The issue stems from JDPI misclassifying out-of-state asymmet...

CVE-2022-22157 Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled

A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection JDPI rules and access unauthorized networks or resources, when 'no-syn-check' is enabled on the device. JDPI incorrectly classifie...