CVE-2022-22220

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks Junos OS, Junos OS Evolved allows a network-based unauthenticated attacker to cause a Denial of Service (DoS). When a BGP flow route with redirect IP extended community is received, and the reachability to the next-hop of the corresponding redirect IP is flapping, the rpd process might crash. Whether the crash occurs depends on the timing of the internally processing of these two events and is outside the attackers control. Please note that this issue also affects Route-Reflectors unless 'routing-options flow firewall-install-disable' is configured. This issue affects: Juniper Networks Junos OS: 18.4 versions prior to 18.4R2-S10, 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.4 versions prior to 19.4R3-S8; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2. Juniper Networks Junos OS Evolved: All versions prior to 20.4R2-EVO; 21.1-EVO versions prior to 21.1R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 18.4R1.

• CWE-367
• CWE-367

• https://kb.juniper.net/JSA69902Vendor Advisory
• https://kb.juniper.net/JSA69902Vendor Advisory

Published

Oct 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22215A Missing Release of File Descriptor or Handle after Effecti…5.5
• CVE-2022-22216An Exposure of Sensitive Information to an Unauthorized Acto…4.3
• CVE-2022-22217An Improper Check for Unusual or Exceptional Conditions vuln…6.5
• CVE-2022-22218On SRX Series devices, an Improper Check for Unusual or Exce…7.5
• CVE-2022-22219Due to the Improper Handling of an Unexpected Data Type in t…5.9
• CVE-2022-2222The Download Monitor WordPress plugin before 4.5.91 does not…4.9
• CVE-2022-22221An Improper Neutralization of Special Elements vulnerability…7.8
• CVE-2022-22223On QFX10000 Series devices using Juniper Networks Junos OS w…7.5
• CVE-2022-22224An Improper Check or Handling of Exceptional Conditions vuln…6.5
• CVE-2022-22225A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerab…5.9
• CVE-2022-22226In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devi…6.5
• CVE-2022-22227An Improper Check for Unusual or Exceptional Conditions vuln…5.3