CVE-2022-22171

HIGH

Juniper Junos OS 19.4-21.3 - Unauthenticated Denial of Service via VXLAN Packet Handling

Title source: llm
STIX 2.1

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect versions of Junos OS prior to 19.4R1.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kb.juniper.net/JSA11277

Scores

CVSS v3 7.5
EPSS 0.0039
EPSS Percentile 60.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-754
Status published
Products (5)
juniper/junos 19.4 r1 (18 CPE variants)
juniper/junos 20.1 r1 (11 CPE variants)
juniper/junos 20.2 r1 (11 CPE variants)
juniper/junos 20.3 r1 (6 CPE variants)
juniper/junos 20.4 r1 (4 CPE variants)
Published Jan 19, 2022
Tracked Since Feb 18, 2026