CVE-2017-2304

Name of the Vulnerable Software and Affected Versions Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 14.1X53-D40 Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 15.1X53-D40 Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 15.1R2

Description The issue, also known as 'Etherleak', occurs because the devices do not pad Ethernet packets with zeros. As a result, some packets can contain fragments of system memory or data from previous packets.

Recommendations For Junos OS 14.1X53, update to version 14.1X53-D40 or later. For Junos OS 15.1X53, update to version 15.1X53-D40 or later. For Junos OS 15.1, update to version 15.1R2 or later.