CVE-2022-22194: Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). Continued receipt of these crafted packets will cause a sustained Denial of Service condition. This issue affects Juniper Networks Junos OS Evolved all versions prior to 20.4R2-S3-EVO on PTX10003, PTX10004, and PTX10008. This issue does not affect: Juniper Networks Junos OS Evolved versions 21.1R1-EVO and above; Juniper Networks Junos OS.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-22194?
CVE-2022-22194 is an Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008.
How does CVE-2022-22194 affect Juniper Junos OS Evolved?
CVE-2022-22194 affects Juniper Junos OS Evolved versions up to and including 20.4.
What is the severity of CVE-2022-22194?
The severity of CVE-2022-22194 is high with a CVSS score of 7.5.
How can an attacker exploit CVE-2022-22194?
An unauthenticated, network-based attacker can exploit CVE-2022-22194 by sending crafted packets to the packetIO daemon, causing a Denial of Service (DoS) if the system continues to receive these packets.
Is there a fix available for CVE-2022-22194?
Yes, Juniper Networks has released a security advisory and patches to address the CVE-2022-22194 vulnerability. Please refer to the Juniper KB article at the following link for more information: https://kb.juniper.net/JSA69505