CVE-2017-2304 - Vulnerability Details

Vendors	Products
Juniper	Ex4300 Ex4600 Junos Qfx3500 Qfx3600 Qfx5100 Qfx5200

Link	Providers
http://www.securityfocus.com/bid/95403
http://www.securitytracker.com/id/1037593
https://kb.juniper.net/JSA10773

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices", "vendor": "Juniper Networks", "versions": [{"status": "affected", "version": "14.1X53 prior to 14.1X53-D40"}, {"status": "affected", "version": "15.1X53 prior to 15.1X53-D40"}, {"status": "affected", "version": "15.1 prior to 15.1R2"}]}], "datePublic": "2017-01-11T00:00:00", "descriptions": [{"lang": "en", "value": "Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'"}], "problemTypes": [{"descriptions": [{"description": "information leak", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-26T09:57:01", "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper"}, "references": [{"name": "1037593", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1037593"}, {"name": "95403", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/95403"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://kb.juniper.net/JSA10773"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "sirt@juniper.net", "ID": "CVE-2017-2304", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices", "version": {"version_data": [{"version_value": "14.1X53 prior to 14.1X53-D40"}, {"version_value": "15.1X53 prior to 15.1X53-D40"}, {"version_value": "15.1 prior to 15.1R2"}]}}]}, "vendor_name": "Juniper Networks"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "information leak"}]}]}, "references": {"reference_data": [{"name": "1037593", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1037593"}, {"name": "95403", "refsource": "BID", "url": "http://www.securityfocus.com/bid/95403"}, {"name": "https://kb.juniper.net/JSA10773", "refsource": "CONFIRM", "url": "https://kb.juniper.net/JSA10773"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:48:05.313Z"}, "title": "CVE Program Container", "references": [{"name": "1037593", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1037593"}, {"name": "95403", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/95403"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kb.juniper.net/JSA10773"}]}]}, "cveMetadata": {"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "assignerShortName": "juniper", "cveId": "CVE-2017-2304", "datePublished": "2017-05-30T14:00:00", "dateReserved": "2016-12-01T00:00:00", "dateUpdated": "2024-08-05T13:48:05.313Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices (string)

vendor : Juniper Networks (string)

versions : [ »

0 : { »

status : affected (string)

version : 14.1X53 prior to 14.1X53-D40 (string)

}

1 : { »

status : affected (string)

version : 15.1X53 prior to 15.1X53-D40 (string)

}

2 : { »

status : affected (string)

version : 15.1 prior to 15.1R2 (string)

}

]

}

]

datePublic : 2017-01-11T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : information leak (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-07-26T09:57:01 (string)

orgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

shortName : juniper (string)

}

references : [ »

0 : { »

name : 1037593 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1037593 (string)

}

1 : { »

name : 95403 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/95403 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kb.juniper.net/JSA10773 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : sirt@juniper.net (string)

ID : CVE-2017-2304 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices (string)

version : { »

version_data : [ »

0 : { »

version_value : 14.1X53 prior to 14.1X53-D40 (string)

}

1 : { »

version_value : 15.1X53 prior to 15.1X53-D40 (string)

}

2 : { »

version_value : 15.1 prior to 15.1R2 (string)

}

]

}

]

}

vendor_name : Juniper Networks (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : information leak (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 1037593 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1037593 (string)

}

1 : { »

name : 95403 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/95403 (string)

}

2 : { »

name : https://kb.juniper.net/JSA10773 (string)

refsource : CONFIRM (string)

url : https://kb.juniper.net/JSA10773 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T13:48:05.313Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 1037593 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1037593 (string)

}

1 : { »

name : 95403 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/95403 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kb.juniper.net/JSA10773 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

assignerShortName : juniper (string)

cveId : CVE-2017-2304 (string)

datePublished : 2017-05-30T14:00:00 (string)

dateReserved : 2016-12-01T00:00:00 (string)

dateUpdated : 2024-08-05T13:48:05.313Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*", "matchCriteriaId": "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*", "matchCriteriaId": "09771B8F-8B2A-4E8B-B4D3-80677697FCF3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*", "matchCriteriaId": "55E2F909-E1CC-45AA-ABA9-58178B751808", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*", "matchCriteriaId": "E1AA12C5-4520-4F79-80BE-66112F7AFC2A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*", "matchCriteriaId": "807C8110-5CC2-45F0-B094-BBF9C0B63BDD", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*", "matchCriteriaId": "547E5737-D385-49B9-A69F-A3B185A34116", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*", "matchCriteriaId": "2ED257ED-A56B-48A6-8568-65F36FFFC753", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*", "matchCriteriaId": "74500FC7-EE82-4AA8-9A5F-15DE4835E337", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*", "matchCriteriaId": "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*", "matchCriteriaId": "285CD1E5-C6D3-470A-8556-653AFF74D0F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*", "matchCriteriaId": "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*", "matchCriteriaId": "C9511DD0-D910-4C29-B0E3-8F9D0531F09C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*", "matchCriteriaId": "1E3B807C-196D-42B8-9042-7582A1366772", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*", "matchCriteriaId": "83FEEE8F-9279-46F2-BAF9-A60537020C61", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*", "matchCriteriaId": "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*", "matchCriteriaId": "1F294E43-73FA-4EF3-90F2-EE29C56D6573", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*", "matchCriteriaId": "EDDE1048-BFEA-4A3E-8270-27C538A68837", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*", "matchCriteriaId": "CC517CD0-FF35-498F-AD33-683B43CA3829", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*", "matchCriteriaId": "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "E594D6DC-87F6-40D2-8268-ED6021462168", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1BB20B5-EA30-4E8E-9055-2E629648436A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F4D44B0-E6CE-4380-8712-AC832DBCB424", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*", "matchCriteriaId": "E974B4BC-64C5-4BB6-AF31-D46AF3763416", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDC5478F-A047-4F6D-BB11-0077A74C0174", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'"}, {"lang": "es", "value": "Los dispositivos QFX3500, QFX3600, QFX5100, QFX5200, EX4300 y EX4600 de Juniper Networks que ejecutan Junos OS 14.1X53 anteriores a 14.1X53-D40, 15.1X53 anteriores a 15.1X53-D40 y 15.1 anteriores a 15.1R2, no rellenan paquetes Ethernet con ceros por lo que algunos paquetes pueden contener fragmentos de memoria del sistema o datos de paquetes anteriores. Este problema tambi\u00e9n es conocido como \"Etherleak\""}], "id": "CVE-2017-2304", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-05-30T14:29:00.847", "references": [{"source": "sirt@juniper.net", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/95403"}, {"source": "sirt@juniper.net", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1037593"}, {"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA10773"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/95403"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1037593"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA10773"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:* (string)

matchCriteriaId : 6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:* (string)

matchCriteriaId : 09771B8F-8B2A-4E8B-B4D3-80677697FCF3 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:* (string)

matchCriteriaId : 55E2F909-E1CC-45AA-ABA9-58178B751808 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:* (string)

matchCriteriaId : E1AA12C5-4520-4F79-80BE-66112F7AFC2A (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:* (string)

matchCriteriaId : 807C8110-5CC2-45F0-B094-BBF9C0B63BDD (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:* (string)

matchCriteriaId : 547E5737-D385-49B9-A69F-A3B185A34116 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:* (string)

matchCriteriaId : 2ED257ED-A56B-48A6-8568-65F36FFFC753 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:* (string)

matchCriteriaId : 74500FC7-EE82-4AA8-9A5F-15DE4835E337 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:* (string)

matchCriteriaId : AAE14AE1-6756-4831-A8D5-A6D07DB24AF2 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:* (string)

matchCriteriaId : 285CD1E5-C6D3-470A-8556-653AFF74D0F3 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:* (string)

matchCriteriaId : C9511DD0-D910-4C29-B0E3-8F9D0531F09C (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:* (string)

matchCriteriaId : 1E3B807C-196D-42B8-9042-7582A1366772 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:* (string)

matchCriteriaId : 83FEEE8F-9279-46F2-BAF9-A60537020C61 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:* (string)

matchCriteriaId : 1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:* (string)

matchCriteriaId : 1F294E43-73FA-4EF3-90F2-EE29C56D6573 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:* (string)

matchCriteriaId : EDDE1048-BFEA-4A3E-8270-27C538A68837 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:* (string)

matchCriteriaId : CC517CD0-FF35-498F-AD33-683B43CA3829 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:* (string)

matchCriteriaId : 53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E594D6DC-87F6-40D2-8268-ED6021462168 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D1BB20B5-EA30-4E8E-9055-2E629648436A (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:qfx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F4D44B0-E6CE-4380-8712-AC832DBCB424 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E974B4BC-64C5-4BB6-AF31-D46AF3763416 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EDC5478F-A047-4F6D-BB11-0077A74C0174 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' (string)

}

1 : { »

lang : es (string)

value : Los dispositivos QFX3500, QFX3600, QFX5100, QFX5200, EX4300 y EX4600 de Juniper Networks que ejecutan Junos OS 14.1X53 anteriores a 14.1X53-D40, 15.1X53 anteriores a 15.1X53-D40 y 15.1 anteriores a 15.1R2, no rellenan paquetes Ethernet con ceros por lo que algunos paquetes pueden contener fragmentos de memoria del sistema o datos de paquetes anteriores. Este problema también es conocido como "Etherleak" (string)

}

]

id : CVE-2017-2304 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-05-30T14:29:00.847 (string)

references : [ »

0 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/95403 (string)

}

1 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1037593 (string)

}

2 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA10773 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/95403 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1037593 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA10773 (string)

}

]

sourceIdentifier : sirt@juniper.net (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object