CVE-2017-2304

Published: May 30, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'

Affected (19)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

19 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Juniper Junos	Version 14.1x53
Juniper Junos	Version 14.1x53 d10
Juniper Junos	Version 14.1x53 d15
Juniper Junos	Version 14.1x53 d16
Juniper Junos	Version 14.1x53 d25
Juniper Junos	Version 14.1x53 d26
Juniper Junos	Version 14.1x53 d27
Juniper Junos	Version 14.1x53 d30
Juniper Junos	Version 14.1x53 d35
Juniper Junos	Version 15.1
Juniper Junos	Version 15.1 r1
Juniper Junos	Version 15.1x53
Juniper Junos	Version 15.1x53 d20
Juniper Junos	Version 15.1x53 d21
Juniper Junos	Version 15.1x53 d25
Juniper Junos	Version 15.1x53 d30
Juniper Junos	Version 15.1x53 d32
Juniper Junos	Version 15.1x53 d33
Juniper Junos	Version 15.1x53 d34

Running on/with	Platform Versions
Juniper Ex4300	All versions
Juniper Ex4600	All versions
Juniper Qfx3500	All versions
Juniper Qfx3600	All versions
Juniper Qfx5100	All versions
Juniper Qfx5200	All versions