Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-22216

Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data

Medium4.3EPSS 0.30%
Published
Updated
Reserved
Assigned by
juniper

Description

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000 Series devices sometimes do not reliably pad Ethernet packets, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' and often detected as CVE-2003-0001. This issue affects: Juniper Networks Junos OS on PTX1000 and PTX10000 Series: All versions prior to 18.4R3-S11; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. Juniper Networks Junos OS on QFX10000 Series and PTX5000 Series: All versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2.

Timeline

  1. ID reserved

    By juniper

  2. · 7 months later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-22216, by who scored it
Scored byCVSSScoreVector
juniperCNA (assigner)3.1Medium4.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVDNVD · Modified3.1Medium4.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS (exploitation in 30 days)
0.30% · top 77% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

Affected products

  • Juniper Networks · Junos OS

    • affected unspecified – < 18.4R3-S11
    • affected 19.1 – < 19.1R2-S3, 19.1R3-S7
    • affected 19.2 – < 19.2R1-S8, 19.2R3-S4
    • affected 19.3 – < 19.3R3-S4
    • affected 19.4 – < 19.4R2-S5, 19.4R3-S6
    • affected 20.1 – < 20.1R3-S2
    • affected 20.2 – < 20.2R3-S3
    • affected 20.3 – < 20.3R3-S2
    • affected 20.4 – < 20.4R3-S4
    • affected 21.1 – < 21.1R2-S1, 21.1R3
    • affected 21.2 – < 21.2R1-S1, 21.2R2

  • Juniper Networks · Junos OS

    • affected unspecified – < 18.3R3-S6
    • affected 18.4 – < 18.4R2-S9, 18.4R3-S10
    • affected 19.1 – < 19.1R2-S3, 19.1R3-S7
    • affected 19.2 – < 19.2R1-S8, 19.2R3-S4
    • affected 19.3 – < 19.3R3-S4
    • affected 19.4 – < 19.4R2-S6, 19.4R3-S6
    • affected 20.1 – < 20.1R3-S2
    • affected 20.2 – < 20.2R3-S3
    • affected 20.3 – < 20.3R3-S1
    • affected 20.4 – < 20.4R3-S1
    • affected 21.1 – < 21.1R2-S1, 21.1R3
    • affected 21.2 – < 21.2R2

What to do

Solution: The following software releases have been updated to resolve this specific issue for Junos OS on PTX1000 and PTX10000 Series: 18.4R3-S11, 19.1R2-S3, 19.1R3-S7, 19.2R1-S8, 19.2R3-S4, 19.3R3-S4, 19.4R2-S5, 19.4R3-S6, 20.1R3-S2, 20.2R3-S3, 20.3R3-S2, 20.4R3-S4, 21.1R2-S1, 21.1R3, 21.2R1-S1, 21.2R2, 21.2R3, 21.3R1, and all subsequent releases. The following software releases have been updated to resolve this specific issue for Junos OS on QFX10000 Series and PTX5000 Series: 18.3R3-S6 ,18.4R2-S9, 18.4R3-S10, 19.1R2-S3, 19.1R3-S7, 19.2R1-S8, 19.2R3-S4, 19.3R3-S4, 19.4R2-S6, 19.4R3-S6, 20.1R3-S2, 20.2R3-S3, 20.3R3-S1, 20.4R3-S1, 21.1R2-S1, 21.1R3, 21.2R2, 21.2R3, 21.3R1, and all subsequent releases.

Workaround: There are no known workarounds for this issue.

Exploitation: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-22216 badge
[![CVE-2022-22216](https://trackcve.app/badge/CVE-2022-22216.svg)](https://trackcve.app/cve/CVE-2022-22216)

Record last updated .