Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data (Juniper Networks Junos OS)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.30 % · percentile 23 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- juniper
- NVD status
- Modified
Description
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000 Series devices sometimes do not reliably pad Ethernet packets, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' and often detected as CVE-2003-0001. This issue affects: Juniper Networks Junos OS on PTX1000 and PTX10000 Series: All versions prior to 18.4R3-S11; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. Juniper Networks Junos OS on QFX10000 Series and PTX5000 Series: All versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2.
Weaknesses (CWE)
- CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.3 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | juniper |
| CVSS 3.1 | MEDIUM 4.3 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | NVD · sirt@juniper.net (Secondary) |
| CVSS 3.1 | MEDIUM 4.3 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-27363
- GCVE · GCVE-0-2022-22216
CERT-FR advisories
- CERTFR-2022-AVI-650 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*< 18.4cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s10:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s7:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s8:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r2-s9:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s10:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s7:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s8:*:*:*:*:*:*cpe:2.3:o:juniper:junos:18.4:r3-s9:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*- +268 more
Affected products
| Product | Versions |
|---|---|
| Juniper Networks · Junos OS | affected unspecified < 18.4R3-S11 ; affected 19.1 < 19.1R2-S3, 19.1R3-S7 ; affected 19.2 < 19.2R1-S8, 19.2R3-S4 ; affected 19.3 < 19.3R3-S4 ; affected 19.4 < 19.4R2-S5, 19.4R3-S6 ; affected 20.1 < 20.1R3-S2 |
| Juniper Networks · Junos OS | affected unspecified < 18.3R3-S6 ; affected 18.4 < 18.4R2-S9, 18.4R3-S10 ; affected 19.1 < 19.1R2-S3, 19.1R3-S7 ; affected 19.2 < 19.2R1-S8, 19.2R3-S4 ; affected 19.3 < 19.3R3-S4 ; affected 19.4 < 19.4R2-S6, 19.4R3-S6 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |