Latest CVE Feed
-
7.5
HIGHCVE-2022-22174
A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service (DoS) condition. Once th... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22173
A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS). In a scenario where Public Key In... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22172
A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a memory leak. Continued exploitation... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22171
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22170
A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN ... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
5.9
MEDIUMCVE-2022-22169
An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who sends specific packets in certain orders and at specific timings to force OSPFv3 to unexpectedly enter g... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22168
An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability. Continued exploitation of... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2022-22167
A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn-check' is enabl... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22166
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service (DoS). If a BGP update... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22164
An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be oper... Read more
Affected Products : junos_os_evolved- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.4
HIGHCVE-2022-22163
An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If a device is configured as DHCPv6 l... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2022-22162
A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this ti... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22161
An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band ma... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22160
An Unchecked Error Condition vulnerability in the subscriber management daemon (smgd) of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service (DoS). In a subscriber management / broadban... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22159
A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an attacker to cause a Denial of Service (DoS) by sending crafted genuine packets to a device. During an attack, the routing protocol daemon (rpd) CPU may... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
9.3
CRITICALCVE-2022-22157
A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn-check' is enabl... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.4
HIGHCVE-2022-22156
An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrit... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-22155
An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in Juniper Networks Junos OS allows an adjacent attacker to cause a memory leak in the Flexible PIC Concentrator (FPC) of an ACX5448 router. The contin... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2022-22154
In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device (SD) control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cau... Read more
Affected Products : junos- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-22153
An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated n... Read more
- Published: Jan. 19, 2022
- Modified: Nov. 21, 2024