Back
CVE-2017-2304
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53…
High7.5EPSS 1.8%
- Published
- Updated
- Reserved
- Assigned by
- juniper
Description
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | High7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 1.8% · top 21% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
- information leak
- CWE-200 (opens in a new tab)All about CWE-200 and its CVEs
Affected products
Juniper Networks · Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices
- affected 14.1X53 prior to 14.1X53-D40
- affected 15.1X53 prior to 15.1X53-D40
- affected 15.1 prior to 15.1R2
References (3)
- 1037593 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- 95403 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- https://kb.juniper.net/JSA10773 (opens in a new tab)x_refsource_CONFIRMx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2017-2304)Record last updated .