CVE-2022-22179

A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service (DoS). In a scenario where DHCP relay or local server is configured the problem can be triggered if a DHCPv4 packet with specific options is received leading to a corruption of the options read from the packet. This corruption can then lead to jdhcpd crash and restart. This issue affects: Juniper Networks Junos OS 17.4R1 and later versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2, 21.2R3; 21.3 versions prior to 21.3R1-S1, 21.3R2.

• CWE-20

• https://kb.juniper.net/JSA11285Vendor Advisory
• https://kb.juniper.net/JSA11285Vendor Advisory

Published

Jan 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22173A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2022-22174A vulnerability in the processing of inbound IPv6 packets in…7.5
• CVE-2022-22175An Improper Locking vulnerability in the SIP ALG of Juniper …7.5
• CVE-2022-22176An Improper Validation of Syntactic Correctness of Input vul…6.5
• CVE-2022-22177A release of illegal memory vulnerability in the snmpd daemo…7.5
• CVE-2022-22178A Stack-based Buffer Overflow vulnerability in the flow proc…7.5
• CVE-2022-2218Cross-site Scripting (XSS) - Stored in GitHub repository ion…6.1
• CVE-2022-22180An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2022-22181A reflected Cross-site Scripting (XSS) vulnerability in J-We…5.4
• CVE-2022-22182A Cross-site Scripting (XSS) vulnerability in Juniper Networ…6.1
• CVE-2022-22183An Improper Access Control vulnerability in Juniper Networks…7.5
• CVE-2022-22184An Improper Input Validation vulnerability in the Routing Pr…7.5