CVE-2022-22196

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service (DoS). The rpd CPU spikes to 100% after a malformed ISIS TLV has been received which will lead to processing issues of routing updates and in turn traffic impact. This issue affects: Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S3-EVO; 21.2 versions prior to 21.2R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

• CWE-754

• https://kb.juniper.net/JSA69509Vendor Advisory
• https://kb.juniper.net/JSA69509Vendor Advisory

Published

Apr 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22190An Improper Access Control vulnerability in the Juniper Netw…7.5
• CVE-2022-22191A Denial of Service (DoS) vulnerability in the processing of…6.5
• CVE-2022-22192An Improper Validation of Syntactic Correctness of Input vul…7.5
• CVE-2022-22193An Improper Handling of Unexpected Data Type vulnerability i…5.5
• CVE-2022-22194An Improper Check for Unusual or Exceptional Conditions vuln…7.5
• CVE-2022-22195An Improper Update of Reference Count vulnerability in the k…7.5
• CVE-2022-22197An Operation on a Resource after Expiration or Release vulne…7.5
• CVE-2022-22198An Access of Uninitialized Pointer vulnerability in the SIP …7.5
• CVE-2022-22199Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-2220Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-22200Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-22201An Improper Validation of Specified Index, Position, or Offs…7.5