Vulnerabilities > Juniper

DATE CVE VULNERABILITY TITLE RISK
2022-01-19 CVE-2022-22164 Improper Initialization vulnerability in Juniper Junos OS Evolved 20.4/21.1/21.2
An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled.
network
low complexity
juniper CWE-665
5.3
2022-01-19 CVE-2022-22166 Improper Validation of Specified Quantity in Input vulnerability in Juniper Junos 20.4/21.1
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash and thereby a Denial of Service (DoS).
low complexity
juniper CWE-1284
6.5
2022-01-19 CVE-2022-22167 Unspecified vulnerability in Juniper Junos
A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn-check' is enabled on the device.
network
low complexity
juniper
critical
9.8
2022-01-19 CVE-2022-22168 Unspecified vulnerability in Juniper Junos
An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability.
low complexity
juniper
6.5
2022-01-19 CVE-2022-22169 Unspecified vulnerability in Juniper Junos 15.1/18.3
An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who sends specific packets in certain orders and at specific timings to force OSPFv3 to unexpectedly enter graceful-restart (GR helper mode) even though there is not any Grace-LSA received in OSPFv3 causing a Denial of Service (DoS).
network
high complexity
juniper
5.9
2022-01-19 CVE-2022-22170 Unspecified vulnerability in Juniper Junos
A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause heap memory to leak and on exhaustion the PFE to reset.
network
low complexity
juniper
7.5
2022-01-19 CVE-2022-22171 Unspecified vulnerability in Juniper Junos
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset.
network
low complexity
juniper
7.5
2022-01-19 CVE-2022-22172 Unspecified vulnerability in Juniper Junos and Junos OS Evolved
A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a memory leak.
low complexity
juniper
6.5
2022-01-19 CVE-2022-22173 Unspecified vulnerability in Juniper Junos
A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS).
network
low complexity
juniper
7.5
2022-01-19 CVE-2022-22174 Unspecified vulnerability in Juniper Junos
A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service (DoS) condition.
network
low complexity
juniper
7.5