CVE-2022-22195 Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash

What is CVE-2022-22195?

CVE-2022-22195 is a high-severity vulnerability in Juniper Junos Os Evolved, published on 14 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service (DoS). This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S1-EVO; 21.1 versions prior to 21.1R3-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS.

Weakness: CWE-911

Which versions are affected by CVE-2022-22195?

It affects 1 product.

Products include Juniper Junos Os Evolved.

How do I fix CVE-2022-22195?

No fix has been published for CVE-2022-22195 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-22195 being exploited?

There is no known exploitation of CVE-2022-22195 in the wild and no public exploit code.

Other vulnerabilities in Juniper Junos Os Evolved

• CVE-2026-21902 Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root Critical 9.3
• CVE-2023-28983 Junos OS Evolved: Shell Injection vulnerability in the gNOI server High 8.8
• CVE-2025-21599 Denial of service in Junos OS Evolved High 8.7
• CVE-2024-47502 Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS High 8.7
• CVE-2024-39531 Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols High 8.7

All Juniper Junos Os Evolved vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wm26-qf93-vqgf.