CVE-2022-22247

CVE-2022-22247 affects Juniper Networks Junos OS Evolved. The issue is an improper input validation vulnerability in the processing of ingress TCP segments, allowing a network-based unauthenticated attacker to send a crafted TCP segment that triggers a kernel panic and leads to a Denial of Servic...

CVE-2022-22240

CVE-2022-22240 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability is an rpd memory issue caused by Allocation of Resources Without Limits or Throttling and a Missing Release of Memory after Effective Lifetime, leading to a potential Denial of Service when running a specific...

CVE-2022-22239 Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation

An Execution with Unnecessary Privileges vulnerability in Management Daemon mgd of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote systems. This vulnerability allows a locally...

CVE-2022-22239 Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation

An Execution with Unnecessary Privileges vulnerability in Management Daemon mgd of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote systems. This vulnerability allows a locally...

CVE-2022-22239

Vulnerability summary: An Execution with Unnecessary Privileges in the Management Daemon (mgd) of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate to root on the device, and potentially to remote systems with user interaction on the local d...

CVE-2022-22238

The vulnerability CVE-2022-22238 affects Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated, adjacent attacker can trigger a Denial of Service by sending a malformed RESV message for a protected LSP, causing an incorrect internal state and an rpd core. Affected are Junos OS and Ju...

CVE-2022-22233 Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. In Segment Routing SR to Label Distribution Protocol L...

CVE-2022-22230

CVE-2022-22230 describes an Improper Input Validation in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent, unauthenticated attacker can cause a Denial of Service by triggering rpd to crash when a router generates multiple specific OSPFv3 LSAs; affec...

CVE-2022-22227 Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX7000 Series allows an unauthenticated network-based attacker to cause a partial Denial of Service DoS. On receipt of specific IPv6 transit traffic,...

CVE-2022-22227

CVE-2022-22227 affects Juniper Networks Junos OS Evolved on ACX7000 Series (ACX7100-48L, ACX7100-32C, ACX7509). The issue is an improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE) that, on receipt of specific IPv6 transit traffic, forwards the traffic to the...

CVE-2022-22225

TOCTOU race condition in Juniper Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd) allows an unauthenticated attacker on an established BGP session to trigger a DoS by crashing rpd when a route in a BGP multipath flap scenario is a contributing route. Affected versions include Junos O...

CVE-2022-22224 Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause the periodic packet management daemon PPMD process to go into an infinite loop,...

CVE-2022-22211 Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID

A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service DoS. Continuously polling the SNMP jnxCosQstatTable causes the FPC to run out of GUID space, causing a Denial of Service to...

CVE-2022-22211

Summary: CVE-2022-22211 affects Juniper Networks Junos OS Evolved on PTX Series. A DoS occurs when an unprivileged attacker continuously polls the SNMP jnxCosQstatTable, exhausting FPC GUID space and rendering FPC resources unreachable. The issue manifests via specific syslog messages (evo-aftman...

CVE-2022-22208

CVE-2022-22208 describes a Use After Free in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (rdp) triggered by BGP session flaps. The race condition causes rpd crashes, leading to a network-based Denial of Service, with impact depending on the affected release. Affected ra...

CVE-2022-22192 Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device

An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. When an incoming TCP packet destined to the device is malformed there is a...

CVE-2022-22192 Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device

An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. When an incoming TCP packet destined to the device is malformed there is a...

CVE-2022-22192

CVE-2022-22192 describes an improper validation of input in the kernel of Juniper Networks Junos OS Evolved on PTX series. A network-based, unauthenticated attacker can cause a kernel panic by sending a malformed TCP packet destined to PTX10004/10008/10016, specifically targeting the BGP, LDP, or...

Juniper Networks Junos OS和Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos...

PT-2022-6673 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved on ACX7000 Series versions 21.1-EVO prior to 21.1R3-S2-EVO Juniper Networks Junos OS Evolved on ACX7000 Series versions 21.2-EVO prior to 21.2R3-S2-EVO Juniper Networks Junos OS Evolved on ACX7000 Series...