Log in Start free

Vulnerability · Published Apr 14, 2022 · Assigned by juniper

CVE-2022-22195Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash

High 7.5

In plain English

A high-severity security flaw in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 35.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service (DoS). This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S1-EVO; 21.1 versions prior to 21.1R3-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS Evolved unspecified – before 20.4R3-S1-EVO21.1 – before 21.1R3-EVO21.2 – before 21.2R3-EVO21.3 – before 21.3R2-EVO
Juniper Networks Junos OS see references

Weakness: CWE-911 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References