← Back

CVE-2022-22192

nvd nist
Published: Oct 18, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: sirt@juniper.net (Secondary)

Description

An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). When an incoming TCP packet destined to the device is malformed there is a possibility of a kernel panic. Only TCP packets destined to the ports for BGP, LDP and MSDP can trigger this. This issue only affects PTX10004, PTX10008, PTX10016. No other PTX Series devices or other platforms are affected. This issue affects Juniper Networks Junos OS Evolved: 20.4-EVO versions prior to 20.4R3-S4-EVO; 21.3-EVO versions prior to 21.3R3-EVO; 21.4-EVO versions prior to 21.4R3-EVO; 22.1-EVO versions prior to 22.1R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO.

Affected (25)

1 product
Junos Os Evolved
Configuration A
25 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 20.4 r1-s1
Version 20.4 r1-s2
Version 20.4 r1
Version 20.4 r2-s1
Version 20.4 r2-s2
Version 20.4 r2-s3
Version 20.4 r2
Version 20.4 r3-s1
Version 20.4 r3-s2
Version 20.4 r3-s3
Version 20.4 r3
Version 21.3 r1-s1
Version 21.3 r1
Version 21.3 r2-s1
Version 21.3 r2-s2
Version 21.3 r2
Version 21.4
Version 21.4 r1-s1
Version 21.4 r1
Version 21.4 r2-s1
Version 21.4 r2-s2
Version 21.4 r2
Version 22.1 r1-s1
Version 22.1 r1-s2
Version 22.1 r1
Running on/withPlatform Versions
Juniper
Ptx10004
All versions
Juniper
Ptx10008
All versions
Juniper
Ptx10016
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.