CVE-2017-2304

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'

• CWE-200

• http://www.securityfocus.com/bid/95403Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037593Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10773Vendor Advisory
• http://www.securityfocus.com/bid/95403Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037593Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10773Vendor Advisory

Published

May 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2298The mcollective-sshkey-security plugin before 0.5.1 for Pupp…6.5
• CVE-2017-2299Versions of the puppetlabs-apache module prior to 1.11.1 and…
• CVE-2017-2300On Juniper Networks SRX Series Services Gateways chassis clu…
• CVE-2017-2301On Juniper Networks products or platforms running Junos OS 1…
• CVE-2017-2302On Juniper Networks products or platforms running Junos OS 1…
• CVE-2017-2303On Juniper Networks products or platforms running Junos OS 1…
• CVE-2017-2305On Juniper Networks Junos Space versions prior to 16.1R1, du…
• CVE-2017-2306On Juniper Networks Junos Space versions prior to 16.1R1, du…
• CVE-2017-2307A reflected cross site scripting vulnerability in the admini…
• CVE-2017-2308An XML External Entity Injection vulnerability in Juniper Ne…
• CVE-2017-2309On Juniper Networks Junos Space versions prior to 16.1R1 whe…
• CVE-2017-2310A firewall bypass vulnerability in the host based firewall o…