CVE-2017-2304

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-30 · updated 2026-06-17
Weakness: CWE-200

Description

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'

Affected products

Juniper Junos OS: 14.1x53, 14.1x53-d10, 14.1x53-d15, 14.1x53-d16, 14.1x53-d25, 14.1x53-d26 (+13)

References

http://www.securityfocus.com/bid/95403
http://www.securitytracker.com/id/1037593
https://kb.juniper.net/JSA10773
http://www.securityfocus.com/bid/95403
http://www.securitytracker.com/id/1037593
https://kb.juniper.net/JSA10773

Get alerted when CVE-2017-2304 or the next vulnerability affects your stack