CVE-2022-22238: Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-18 · updated 2026-06-17
Weakness: CWE-754

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). When an incoming RESV message corresponding to a protected LSP is malformed it causes an incorrect internal state resulting in an rpd core. This issue affects: Juniper Networks Junos OS All versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R3-S8; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R3; 21.3 versions prior to 21.3R2. Juniper Networks Junos OS Evolved All versions prior to 20.2R3-S3-EVO; 20.3-EVO version 20.3R1-EVO and later versions; 20.4-EVO versions prior to 20.4R3-S1-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO version 21.2R1-EVO and later versions; 21.3-EVO versions prior to 21.3R2-EVO.

Affected products

Juniper Junos OS: before 19.2; 19.2, 19.2-r1, 19.2-r1-s1, 19.2-r1-s2, 19.2-r1-s3, 19.2-r1-s4 (+104) — fixed in 19.2
Juniper Networks Junos OS Evolved: before 20.2; 20.2, 20.2-r1, 20.2-r1-s1, 20.2-r2, 20.2-r2-s1, 20.2-r3 (+29) — fixed in 20.2

How to fix

Upgrade to a fixed version: Juniper Junos OS 19.2; Juniper Networks Junos OS Evolved 20.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-22238 or the next vulnerability affects your stack