Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-22178 Details

Description

A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://kb.juniper.net/JSA11284	CVE	Vendor Advisory
https://kb.juniper.net/JSA11284	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-121	Stack-based Buffer Overflow	[email protected]

Affected Products

Product	Versions
juniper junos	20.4 r1 20.4 r1-s1 20.4 r2 20.4 r2-s1 20.4 r2-s2
CPE cpe:2.3:o:juniper:junos:20.4:r1:::::: cpe:2.3:o:juniper:junos:20.4:r1-s1:::::: cpe:2.3:o:juniper:junos:20.4:r2:::::: cpe:2.3:o:juniper:junos:20.4:r2-s1:::::: cpe:2.3:o:juniper:junos:20.4:r2-s2:::::: cpe:2.3:o:juniper:junos:20.4:r3:::::: cpe:2.3:o:juniper:junos:20.4:r3-s1:::::: cpe:2.3:o:juniper:junos:21.1:r1:::::: cpe:2.3:o:juniper:junos:21.1:r1-s1:::::: cpe:2.3:o:juniper:junos:21.1:r2:::::: cpe:2.3:o:juniper:junos:21.2:r1:::::: cpe:2.3:o:juniper:junos:21.2:r1-s1:::::: cpe:2.3:o:juniper:junos:21.3:r1:::::: Remediation No remediation found in references.
juniper mx10	All versions
CPE cpe:2.3:h:juniper:mx10:-:::::::* Remediation No remediation found in references.
juniper mx10000	All versions
CPE cpe:2.3:h:juniper:mx10000:-:::::::* Remediation No remediation found in references.
juniper mx10003	All versions
CPE cpe:2.3:h:juniper:mx10003:-:::::::* Remediation No remediation found in references.
juniper mx10008	All versions
CPE cpe:2.3:h:juniper:mx10008:-:::::::* Remediation No remediation found in references.
juniper mx10016	All versions
CPE cpe:2.3:h:juniper:mx10016:-:::::::* Remediation No remediation found in references.
juniper mx104	All versions
CPE cpe:2.3:h:juniper:mx104:-:::::::* Remediation No remediation found in references.
juniper mx150	All versions
CPE cpe:2.3:h:juniper:mx150:-:::::::* Remediation No remediation found in references.
juniper mx2008	All versions
CPE cpe:2.3:h:juniper:mx2008:-:::::::* Remediation No remediation found in references.
juniper mx2010	All versions
CPE cpe:2.3:h:juniper:mx2010:-:::::::* Remediation No remediation found in references.
juniper mx2020	All versions
CPE cpe:2.3:h:juniper:mx2020:-:::::::* Remediation No remediation found in references.
juniper mx204	All versions
CPE cpe:2.3:h:juniper:mx204:-:::::::* Remediation No remediation found in references.
juniper mx240	All versions
CPE cpe:2.3:h:juniper:mx240:-:::::::* Remediation No remediation found in references.
juniper mx40	All versions
CPE cpe:2.3:h:juniper:mx40:-:::::::* Remediation No remediation found in references.
juniper mx480	All versions
CPE cpe:2.3:h:juniper:mx480:-:::::::* Remediation No remediation found in references.
juniper mx5	All versions
CPE cpe:2.3:h:juniper:mx5:-:::::::* Remediation No remediation found in references.
juniper mx80	All versions
CPE cpe:2.3:h:juniper:mx80:-:::::::* Remediation No remediation found in references.
juniper mx960	All versions
CPE cpe:2.3:h:juniper:mx960:-:::::::* Remediation No remediation found in references.
juniper srx100	All versions
CPE cpe:2.3:h:juniper:srx100:-:::::::* Remediation No remediation found in references.
juniper srx110	All versions
CPE cpe:2.3:h:juniper:srx110:-:::::::* Remediation No remediation found in references.
juniper srx1400	All versions
CPE cpe:2.3:h:juniper:srx1400:-:::::::* Remediation No remediation found in references.
juniper srx1500	All versions
CPE cpe:2.3:h:juniper:srx1500:-:::::::* Remediation No remediation found in references.
juniper srx210	All versions
CPE cpe:2.3:h:juniper:srx210:-:::::::* Remediation No remediation found in references.
juniper srx220	All versions
CPE cpe:2.3:h:juniper:srx220:-:::::::* Remediation No remediation found in references.
juniper srx240	All versions
CPE cpe:2.3:h:juniper:srx240:-:::::::* Remediation No remediation found in references.
juniper srx240h2	All versions
CPE cpe:2.3:h:juniper:srx240h2:-:::::::* Remediation No remediation found in references.
juniper srx300	All versions
CPE cpe:2.3:h:juniper:srx300:-:::::::* Remediation No remediation found in references.
juniper srx320	All versions
CPE cpe:2.3:h:juniper:srx320:-:::::::* Remediation No remediation found in references.
juniper srx340	All versions
CPE cpe:2.3:h:juniper:srx340:-:::::::* Remediation No remediation found in references.
juniper srx3400	All versions
CPE cpe:2.3:h:juniper:srx3400:-:::::::* Remediation No remediation found in references.
juniper srx345	All versions
CPE cpe:2.3:h:juniper:srx345:-:::::::* Remediation No remediation found in references.
juniper srx3600	All versions
CPE cpe:2.3:h:juniper:srx3600:-:::::::* Remediation No remediation found in references.
juniper srx380	All versions
CPE cpe:2.3:h:juniper:srx380:-:::::::* Remediation No remediation found in references.
juniper srx4000	All versions
CPE cpe:2.3:h:juniper:srx4000:-:::::::* Remediation No remediation found in references.
juniper srx4100	All versions
CPE cpe:2.3:h:juniper:srx4100:-:::::::* Remediation No remediation found in references.
juniper srx4200	All versions
CPE cpe:2.3:h:juniper:srx4200:-:::::::* Remediation No remediation found in references.
juniper srx4600	All versions
CPE cpe:2.3:h:juniper:srx4600:-:::::::* Remediation No remediation found in references.
juniper srx5000	All versions
CPE cpe:2.3:h:juniper:srx5000:-:::::::* Remediation No remediation found in references.
juniper srx5400	All versions
CPE cpe:2.3:h:juniper:srx5400:-:::::::* Remediation No remediation found in references.
juniper srx550	All versions
CPE cpe:2.3:h:juniper:srx550:-:::::::* Remediation No remediation found in references.
juniper srx550 hm	All versions
CPE cpe:2.3:h:juniper:srx550_hm:-:::::::* Remediation No remediation found in references.
juniper srx550m	All versions
CPE cpe:2.3:h:juniper:srx550m:-:::::::* Remediation No remediation found in references.
juniper srx5600	All versions
CPE cpe:2.3:h:juniper:srx5600:-:::::::* Remediation No remediation found in references.
juniper srx5800	All versions
CPE cpe:2.3:h:juniper:srx5800:-:::::::* Remediation No remediation found in references.
juniper srx650	All versions
CPE cpe:2.3:h:juniper:srx650:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jan 26, 2022	Initial Analysis	[email protected]

CVE-2022-22178 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation