CVE-2022-22175

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.

• CWE-667

• https://kb.juniper.net/JSA11281Vendor Advisory
• https://kb.juniper.net/JSA11281Vendor Advisory

Published

Jan 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2217Cross-site Scripting (XSS) - Generic in GitHub repository io…6.1
• CVE-2022-22170A Missing Release of Resource after Effective Lifetime vulne…7.5
• CVE-2022-22171An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2022-22172A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2022-22173A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2022-22174A vulnerability in the processing of inbound IPv6 packets in…7.5
• CVE-2022-22176An Improper Validation of Syntactic Correctness of Input vul…6.5
• CVE-2022-22177A release of illegal memory vulnerability in the snmpd daemo…7.5
• CVE-2022-22178A Stack-based Buffer Overflow vulnerability in the flow proc…7.5
• CVE-2022-22179A Improper Validation of Specified Index, Position, or Offse…6.5
• CVE-2022-2218Cross-site Scripting (XSS) - Stored in GitHub repository ion…6.1
• CVE-2022-22180An Improper Check for Unusual or Exceptional Conditions vuln…7.5