CVE-2022-22247

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An Improper Input Validation vulnerability in ingress TCP segment processing of Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker to send a crafted TCP segment to the device, triggering a kernel panic, leading to a Denial of Service (DoS) condition. Continued receipt and processing of this TCP segment could create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS Evolved: 21.3 versions prior to 21.3R3-EVO; 21.4 versions prior to 21.4R2-EVO; 22.1 versions prior to 22.1R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.3R1-EVO.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS Evolved	>= 21.3-EVO, < 21.3R3-EVO; >= 21.4-EVO, < 21.4R2-EVO; >= 22.1-EVO, < 22.1R2-EVO

References

https://kb.juniper.net/JSA69904Vendor Advisory
https://kb.juniper.net/JSA69904Vendor Advisory

Timeline

Published: Oct 18, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-222487.3An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-privileged local user CVE-2022-222496.5An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on M CVE-2022-22257.8By using warp-cli subcommands (disable-ethernet, disable-wifi), it was possible for a user without admin privileges to bypass configured Zer CVE-2022-222506.5An Improper Control of a Resource Through its Lifetime vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Juno CVE-2022-222517.8On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recovera CVE-2022-222527.5The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.CVE-2022-222537.5The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect CVE-2022-222547.5A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confi CVE-2022-222557.5The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability.CVE-2022-222567.5The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-222577.5The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data CVE-2022-222589.8The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to