CVE-2022-22212 Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops
Unauthenticated attackers can cause a sustained Denial of Service on Juniper Junos OS Evolved devices by sending high rates of specific hostbound traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-22212?
CVE-2022-22212 is a high-severity denial of service vulnerability in Juniper Junos Os Evolved, published on 20 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows unauthenticated network based attacker to cause a Denial of Service (DoS). On all Junos Evolved platforms hostbound protocols will be impacted by a high rate of specific hostbound traffic from ports on a PFE. Continued receipt of this amount of traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS Evolved: 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.2R1.
Weakness: CWE-770
Which versions are affected by CVE-2022-22212?
It affects 1 product.
Products include Juniper Junos Os Evolved.
How do I fix CVE-2022-22212?
No fix has been published for CVE-2022-22212 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-22212 being exploited?
There is no known exploitation of CVE-2022-22212 in the wild and no public exploit code.
Other vulnerabilities in Juniper Junos Os Evolved
- CVE-2026-21902 Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root
- CVE-2023-28983 Junos OS Evolved: Shell Injection vulnerability in the gNOI server
- CVE-2025-21599 Denial of service in Junos OS Evolved
- CVE-2024-47502 Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS
- CVE-2024-39531 Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols
Sources
Also known as GHSA-3f3p-8vhv-qrj8.