CVE-2022-22217

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). The issue is caused by malformed MLD packets looping on a multi-homed Ethernet Segment Identifier (ESI) when VXLAN is configured. These MLD packets received on a multi-homed ESI are sent to the peer, and then incorrectly forwarded out the same ESI, violating the split horizon rule. This issue only affects QFX10K Series switches, including the QFX10002, QFX10008, and QFX10016. Other products and platforms are unaffected by this vulnerability. This issue affects Juniper Networks Junos OS on QFX10K Series: All versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R1-S9, 19.2R3-S5; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S4; 20.2 versions prior to 20.2R3-S4; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2-S1, 21.2R3; 21.3 versions prior to 21.3R2.

• CWE-754

• https://kb.juniper.net/JSA69721Vendor Advisory
• https://kb.juniper.net/JSA69721Vendor Advisory

Published

Jul 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22211A limitless resource allocation vulnerability in FPC resourc…7.5
• CVE-2022-22212An Allocation of Resources Without Limits or Throttling vuln…7.5
• CVE-2022-22213A vulnerability in Handling of Undefined Values in the routi…5.9
• CVE-2022-22214An Improper Input Validation vulnerability in the Packet For…6.5
• CVE-2022-22215A Missing Release of File Descriptor or Handle after Effecti…5.5
• CVE-2022-22216An Exposure of Sensitive Information to an Unauthorized Acto…4.3
• CVE-2022-22218On SRX Series devices, an Improper Check for Unusual or Exce…7.5
• CVE-2022-22219Due to the Improper Handling of an Unexpected Data Type in t…5.9
• CVE-2022-2222The Download Monitor WordPress plugin before 4.5.91 does not…4.9
• CVE-2022-22220A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab…5.9
• CVE-2022-22221An Improper Neutralization of Special Elements vulnerability…7.8
• CVE-2022-22223On QFX10000 Series devices using Juniper Networks Junos OS w…7.5