CVE-2017-2304: Infoleak
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2304?
CVE-2017-2304 is classified as a medium severity vulnerability due to its potential to expose fragments of system memory.
How do I fix CVE-2017-2304?
To fix CVE-2017-2304, upgrade to Junos OS version 14.1X53-D40, 15.1X53-D40, or 15.1R2 or later.
What devices are affected by CVE-2017-2304?
The affected devices include Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 running specific versions of Junos OS.
Is my Juniper device vulnerable to CVE-2017-2304?
If your device is running Junos OS versions 14.1X53 prior to 14.1X53-D40 or 15.1 prior to 15.1R2, it is vulnerable to CVE-2017-2304.
What type of information can be exposed due to CVE-2017-2304?
CVE-2017-2304 can expose fragments of system memory or data from previous packets, potentially leading to sensitive information leakage.