PT-2017-15337
CVE-2017-2304
·
تاريخ النشر
2017-05-30
·
تاريخ التحديث
2019-05-10
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 14.1X53-D40
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 15.1X53-D40
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 15.1R2
Description
The issue, also known as 'Etherleak', occurs because the devices do not pad Ethernet packets with zeros. As a result, some packets can contain fragments of system memory or data from previous packets.
Recommendations
For Junos OS 14.1X53, update to version 14.1X53-D40 or later.
For Junos OS 15.1X53, update to version 15.1X53-D40 or later.
For Junos OS 15.1, update to version 15.1R2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾