CVE:CVE-2022-22219
CNNVD:CNNVD-202210-1173
Juniper Networks Junos OS和Juniper Networks Junos OS Evolved都是美国瞻博网络（Juniper Networks）公司的产品。Juniper Networks Junos OS是一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。Juniper Networks Junos OS Evolved是Junos OS 的升级版系统。
Junos OS存在安全漏洞，该漏洞源于处理 EVPN 路由时对意外数据类型的不当，攻击者利用该漏洞可以控制连接到路由反射器的 BGP 客户端，或通过中间的机器（MITM ) 攻击，可以发送包含在 BGP 更新中的特定 EVPN 路由，触发路由协议守护进程 (RPD) 崩溃，以下产品和版本受到影响：Junos OS 21.3, 21.4, 22.1, 22.2；Junos OS Evolved 21.3-EVO, 21.4-EVO, 22.1-EVO, 22.2-EVO。
solution:Upgrade juniper junos to a higher version than 21.3,21.3:r1,21.3:r1-s1,21.3:r1-s2,21.3:r2,21.3:r2-s1,21.3:r2-s2,21.3:r3,21.3:r3-s1,21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,21.4:r2,21.4:r2-s1,22.1:r1,22.1:r1-s1,22.1:r2,22.1:r2-s2,22.2:r1,22.2:r1-s1,and avoid the version 21.3,21.3:r1,21.3:r1-s1,21.3:r1-s2,21.3:r2,21.3:r2-s1,21.3:r2-s2,21.3:r3,21.3:r3-s1,21.4,21.4:r1,21.4:r1-s1,21.4:r1-s2,21.4:r2,21.4:r2-s1,22.1:r1,22.1:r1-s1,22.1:r2,22.1:r2-s2,22.2:r1,22.2:r1-s1; Upgrade juniper junos_os_evolved to a higher version than 21.3:r1,21.3:r1-s1,21.3:r2,21.3:r2-s1,21.3:r2-s2,22.1:r1,22.1:r1-s1,22.2:r1,22.2:r1-s1,and avoid the version 21.3:r1,21.3:r1-s1,21.3:r2,21.3:r2-s1,21.3:r2-s2,22.1:r1,22.1:r1-s1,22.2:r1,22.2:r1-s1