csirt@kutim:~/threat-intel/cve/CVE-2022-22176

Katalog CVE

CVSS 6.5 · Medium EPSS 0,37%

Kerentanan Improper Validation of Syntactic Correctness of Input pada juniper junos. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed DHCP packet to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If option-82 is configured in a DHCP snooping / -security scenario, jdhcpd crashes if a specific malformed DHCP request packet is received. The DHCP functionality is impacted while jdhcpd restarts, and continued exploitation of the vulnerability will lead to the unavailability of the DHCP service and thereby a sustained DoS. This issue affects Juniper Networks Junos OS 13.2 version 13.2R1 and later versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect Juniper Networks Junos OS version 12.3R12 and prior versions.

Rincian

Terbit di NVD
19 Januari 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1286: Improper Validation of Syntactic Correctness of Input
CWE-20: Improper Input Validation
EPSS (30 hari)
0,37% peluang dieksploitasi; lebih tinggi dari 28,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper junos Versi 13.2 r1
juniper junos Versi 13.2 r2
juniper junos Versi 13.2 r3
juniper junos Versi 13.2 r4
juniper junos Versi 13.2 r5
juniper junos Versi 13.2 r6
juniper junos Versi 13.2 r7
juniper junos Versi 13.2 r7-s1
juniper junos Versi 13.2 r7-s2
juniper junos Versi 13.2 r8
juniper junos Versi 13.2x51
juniper junos Versi 13.2x51 d15
juniper junos Versi 13.2x51 d20
juniper junos Versi 13.2x51 d20.2
juniper junos Versi 13.2x51 d21
juniper junos Versi 13.2x51 d25
juniper junos Versi 13.2x51 d26
juniper junos Versi 13.2x51 d30
juniper junos Versi 13.2x51 d35
juniper junos Versi 13.2x52
juniper junos Versi 13.2x52 d10
juniper junos Versi 13.2x52 d15
juniper junos Versi 13.2x52 d20
juniper junos Versi 13.2x52 d25
juniper junos Versi 13.2x52 d5
juniper junos Versi 13.3
juniper junos Versi 13.3 r1
juniper junos Versi 13.3 r10
juniper junos Versi 13.3 r2
juniper junos Versi 13.3 r2-s2
juniper junos Versi 13.3 r3
juniper junos Versi 13.3 r4
juniper junos Versi 13.3 r4-s11
juniper junos Versi 13.3 r5
juniper junos Versi 13.3 r6
juniper junos Versi 13.3 r7
juniper junos Versi 13.3 r8
juniper junos Versi 13.3 r9
juniper junos Versi 13.3r9
juniper junos Versi 14.1
juniper junos Versi 14.1 r1
juniper junos Versi 14.1 r2
juniper junos Versi 14.1 r3
juniper junos Versi 14.1 r4
juniper junos Versi 14.1 r5
juniper junos Versi 14.1 r6
juniper junos Versi 14.1 r7
juniper junos Versi 14.1 r8
juniper junos Versi 14.1 r8-s3
juniper junos Versi 14.1 r9
juniper junos Versi 14.1r7
juniper junos Versi 14.1x50
juniper junos Versi 14.1x50 d60
juniper junos Versi 14.1x51
juniper junos Versi 14.1x51 d60
juniper junos Versi 14.1x53
juniper junos Versi 14.1x53 d10
juniper junos Versi 14.1x53 d107
juniper junos Versi 14.1x53 d121
juniper junos Versi 14.1x53 d15

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 320 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.