CVE-2022-22176

An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed DHCP packet to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If option-82 is configured in a DHCP snooping / -security scenario, jdhcpd crashes if a specific malformed DHCP request packet is received. The DHCP functionality is impacted while jdhcpd restarts, and continued exploitation of the vulnerability will lead to the unavailability of the DHCP service and thereby a sustained DoS. This issue affects Juniper Networks Junos OS 13.2 version 13.2R1 and later versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect Juniper Networks Junos OS version 12.3R12 and prior versions.

• CWE-1286
• CWE-20

• https://kb.juniper.net/JSA11282Vendor Advisory
• https://kb.juniper.net/JSA11282Vendor Advisory

Published

Jan 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22170A Missing Release of Resource after Effective Lifetime vulne…7.5
• CVE-2022-22171An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2022-22172A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2022-22173A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2022-22174A vulnerability in the processing of inbound IPv6 packets in…7.5
• CVE-2022-22175An Improper Locking vulnerability in the SIP ALG of Juniper …7.5
• CVE-2022-22177A release of illegal memory vulnerability in the snmpd daemo…7.5
• CVE-2022-22178A Stack-based Buffer Overflow vulnerability in the flow proc…7.5
• CVE-2022-22179A Improper Validation of Specified Index, Position, or Offse…6.5
• CVE-2022-2218Cross-site Scripting (XSS) - Stored in GitHub repository ion…6.1
• CVE-2022-22180An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2022-22181A reflected Cross-site Scripting (XSS) vulnerability in J-We…5.4