CVE-2017-2304

N/A

Published: May 30, 2017 at 02:00 PM UTC

Updated: June 17, 2026 at 01:15 AM UTC

7 products affected across 2 vendorsJunosQfx5200Ex4600

Using Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices by Juniper Networks?

Get instant alerts when new vulnerabilities affect Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos · Juniper Networks

95%

v < 14.1X53-D40v < 15.1R2v < 15.1X53-D4014.1x5314.1x53 d10 14.1x53 d15 14.1x53 d16 14.1x53 d25 14.1x53 d26 14.1x53 d27 14.1x53 d30 14.1x53 d35 15.1 15.1 r115.1x5315.1x53 d20 15.1x53 d21 15.1x53 d25 15.1x53 d30 15.1x53 d32 15.1x53 d33 15.1x53 d34

Affected range stops below 14.1X53-D40, so it looks safe — our inference, not a vendor statement

Affected range stops below 15.1R2, so it looks safe — our inference, not a vendor statement

Affected range stops below 15.1X53-D40, so it looks safe — our inference, not a vendor statement

juniper-ex4300 (environment) · juniper-ex4600 (environment) · juniper-qfx3500 (environment) · juniper-qfx3600 (environment) · juniper-qfx5100 (environment) · juniper-qfx5200 (environment)

Ex4300 · Juniperdevice

80%

All versions

Ex4600 · Juniperdevice

80%

All versions

Qfx3500 · Juniperdevice

80%

All versions

Qfx3600 · Juniperdevice

80%

All versions