CVE-2022-22195— Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash
Quick assessment
Affected
Juniper Networks Junos OS Evolved
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。 Juniper Networks Junos OS Evolved 存在安全漏洞，该漏洞源于 Evolved kernel 存在引用计数更新不当漏洞。未经身份验证的网络攻击者通过该漏洞可以导致拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-22195
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service (DoS). This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S1-EVO; 21.1 versions prior to 21.1R3-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
引用计数的更新不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Juniper Networks Junos OS Evolved 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Juniper Networks Junos OS Evolved是美国瞻博网络（Juniper Networks）公司的Junos OS 的升级版系统。 Juniper Networks Junos OS Evolved 存在安全漏洞，该漏洞源于 Evolved kernel 存在引用计数更新不当漏洞。未经身份验证的网络攻击者通过该漏洞可以导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS Evolved | unspecified ~ 20.4R3-S1-EVO | - |
|
| Juniper Networks | Junos OS | any | - |
|
II. Public POCs for CVE-2022-22195
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-22195
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-22195 (1)
-
https://kb.juniper.net/JSA69508 x_refsource_CONFIRM
Same Patch Batch · Juniper Networks · 2022-04-14 · 16 CVEs total
| CVE-2022-22182 | 8.8 HIGH | Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web ses |
| CVE-2022-22181 | 8.0 HIGH | Junos OS: J-Web can be compromised through reflected XSS attacks |
| CVE-2022-22187 | 7.8 HIGH | JIMS: Local Privilege Escalation vulnerability via repair functionality |
| CVE-2022-22198 | 7.5 HIGH | Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a spec |
| CVE-2022-22197 | 7.5 HIGH | Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target fi |
| CVE-2022-22194 | 7.5 HIGH | Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE |
| CVE-2022-22188 | 7.5 HIGH | Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control |
| CVE-2022-22185 | 7.5 HIGH | Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a sp |
| CVE-2022-22183 | 7.5 HIGH | Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine t |
| CVE-2022-22190 | 7.4 HIGH | Paragon Active Assurance Control Center: Information disclosure vulnerability in crafted U |
| CVE-2022-22189 | 7.3 HIGH | Contrail Service Orchestration: An authenticated local user may have their permissions ele |
| CVE-2022-22186 | 7.2 HIGH | Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management |
| CVE-2022-22196 | 6.5 MEDIUM | Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has b |
| CVE-2022-22191 | 6.5 MEDIUM | Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traf |
| CVE-2022-22193 | 5.5 MEDIUM | Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command i |
IV. Related Vulnerabilities
Same product: Junos OS Evolved
-
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil -
CVE-2026-57028
Junos OS Evolved: A port which has been inadvertently expose -
CVE-2026-33803
Junos OS Evolved: A port which has been inadvertently expose -
CVE-2026-33794
Junos OS Evolved: PTX Series: Receipt of repeated ECMP routi -
CVE-2026-33783
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned vi
Same vendor: Juniper Networks
-
CVE-2026-57054
Junos OS: MX Series: Web filtering doesn't block specificall -
CVE-2026-57032
Junos OS: EX Series: Subscribing to an unsupported telemetry -
CVE-2026-57031
Junos OS: MX Series: For subscribers configured on static in -
CVE-2026-57030
Junos OS: SRX Series: Flow sessions are not getting cleared -
CVE-2026-57029
Junos OS Evolved: QFX Series: When sFlow collector reachabil
Same weakness: CWE-911
V. Comments for CVE-2022-22195
No comments yet