CVE-2022-22210

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the Layer 2 Address Learning Manager (L2ALM) process will crash leading to an FPC reboot. Continued receipt of this specific packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on QFX5000 Series, MX Series: 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to 20.4R3-S2; 21.2 versions prior to 21.2R2-S1. This issue does not affect Juniper Networks Junos OS: All versions prior to 20.3R1; 21.1 version 21.1R1 and later versions.

• CWE-476

• https://kb.juniper.net/JSA69714Vendor Advisory
• https://kb.juniper.net/JSA69714Vendor Advisory

Published

Jul 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22205A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2022-22206A Buffer Overflow vulnerability in the PFE of Juniper Networ…7.5
• CVE-2022-22207A Use After Free vulnerability in the Advanced Forwarding To…7.5
• CVE-2022-22208A Use After Free vulnerability in the Routing Protocol Daemo…5.9
• CVE-2022-22209A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2022-2221Information Exposure vulnerability in My Account Settings of…6.5
• CVE-2022-22211A limitless resource allocation vulnerability in FPC resourc…7.5
• CVE-2022-22212An Allocation of Resources Without Limits or Throttling vuln…7.5
• CVE-2022-22213A vulnerability in Handling of Undefined Values in the routi…5.9
• CVE-2022-22214An Improper Input Validation vulnerability in the Packet For…6.5
• CVE-2022-22215A Missing Release of File Descriptor or Handle after Effecti…5.5
• CVE-2022-22216An Exposure of Sensitive Information to an Unauthorized Acto…4.3