CVE-2022-22195

Summary

An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a counter overflow, eventually causing a Denial of Service (DoS). This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R3-S1-EVO; 21.1 versions prior to 21.1R3-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS Evolvedunspecified < 20.4R3-S1-EVOaffected
Juniper NetworksJunos OS Evolved21.1 < 21.1R3-EVOaffected
Juniper NetworksJunos OS Evolved21.2 < 21.2R3-EVOaffected
Juniper NetworksJunos OS Evolved21.3 < 21.3R2-EVOaffected
Juniper NetworksJunos OSanyunaffected

Weaknesses

  • CWE-911: CWE-911 Improper Update of Reference Count
  • Denial of Service (DoS)

Workarounds

There are no viable workarounds for this issue.

To reduce the risk of exploitation of this issue, use access lists or firewall filters to limit access to only trusted networks, hosts and users.

ADP Enrichment

CVE Program Container

Additional References

References