{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2022-22216", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-22216", "idYear": 2022, "status": "PUBLISHED", "publishedAt": "2022-07-20T14:15:41.890Z", "updatedAt": "2024-09-16T18:24:21.149Z", "importedAt": "2026-10-24T01:56:36.661Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data", "summary": "An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000 Series devices sometimes do not reliably pad Ethernet packets, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' and often detected as CVE-2003-0001. This issue affects: Juniper Networks Junos OS on PTX1000 and PTX10000 Series: All versions prior to 18.4R3-S11; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. Juniper Networks Junos OS on QFX10000 Series and PTX5000 Series: All versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2.", "affected": [ { "vendor": "Juniper Networks", "product": "Junos OS", "platforms": [ "PTX1000, PTX10000 Series" ], "versions": [ { "version": "unspecified", "status": "affected", "versionType": "custom", "lessThan": "18.4R3-S11" }, { "version": "19.1", "status": "affected", "versionType": "custom", "lessThan": "19.1R2-S3, 19.1R3-S7" }, { "version": "19.2", "status": "affected", "versionType": "custom", "lessThan": "19.2R1-S8, 19.2R3-S4" }, { "version": "19.3", "status": "affected", "versionType": "custom", "lessThan": "19.3R3-S4" }, { "version": "19.4", "status": "affected", "versionType": "custom", "lessThan": "19.4R2-S5, 19.4R3-S6" }, { "version": "20.1", "status": "affected", "versionType": "custom", "lessThan": "20.1R3-S2" }, { "version": "20.2", "status": "affected", "versionType": "custom", "lessThan": "20.2R3-S3" }, { "version": "20.3", "status": "affected", "versionType": "custom", "lessThan": "20.3R3-S2" }, { "version": "20.4", "status": "affected", "versionType": "custom", "lessThan": "20.4R3-S4" }, { "version": "21.1", "status": "affected", "versionType": "custom", "lessThan": "21.1R2-S1, 21.1R3" }, { "version": "21.2", "status": "affected", "versionType": "custom", "lessThan": "21.2R1-S1, 21.2R2" } ] }, { "vendor": "Juniper Networks", "product": "Junos OS", "platforms": [ "QFX10000 Series, PTX5000 Series" ], "versions": [ { "version": "unspecified", "status": "affected", "versionType": "custom", "lessThan": "18.3R3-S6" }, { "version": "18.4", "status": "affected", "versionType": "custom", "lessThan": "18.4R2-S9, 18.4R3-S10" }, { "version": "19.1", "status": "affected", "versionType": "custom", "lessThan": "19.1R2-S3, 19.1R3-S7" }, { "version": "19.2", "status": "affected", "versionType": "custom", "lessThan": "19.2R1-S8, 19.2R3-S4" }, { "version": "19.3", "status": "affected", "versionType": "custom", "lessThan": "19.3R3-S4" }, { "version": "19.4", "status": "affected", "versionType": "custom", "lessThan": "19.4R2-S6, 19.4R3-S6" }, { "version": "20.1", "status": "affected", "versionType": "custom", "lessThan": "20.1R3-S2" }, { "version": "20.2", "status": "affected", "versionType": "custom", "lessThan": "20.2R3-S3" }, { "version": "20.3", "status": "affected", "versionType": "custom", "lessThan": "20.3R3-S1" }, { "version": "20.4", "status": "affected", "versionType": "custom", "lessThan": "20.4R3-S1" }, { "version": "21.1", "status": "affected", "versionType": "custom", "lessThan": "21.1R2-S1, 21.1R3" }, { "version": "21.2", "status": "affected", "versionType": "custom", "lessThan": "21.2R2" } ] } ] } } }