CVE-2022-22194

Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart

State
Published
Severity
7.5 High
Published
Apr 14, 2022
Updated
Sep 17, 2024
Reserved
Dec 21, 2021

Read the record on cve.org

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). Continued receipt of these crafted packets will cause a sustained Denial of Service condition. This issue affects Juniper Networks Junos OS Evolved all versions prior to 20.4R2-S3-EVO on PTX10003, PTX10004, and PTX10008. This issue does not affect: Juniper Networks Junos OS Evolved versions 21.1R1-EVO and above; Juniper Networks Junos OS.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
Junos OS EvolvedJuniper Networks
  • before 20.4R2-S3-EVO, 20.4R3-EVOAffected
Junos OS EvolvedJuniper Networks
  • 21.1R1-EVO to before 21.1*Not affected
Junos OSJuniper Networks
  • anyNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.