CVE-2018-0014
Summary
| CVE | CVE-2018-0014 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-01-10 22:29:00 UTC |
| Updated | 2019-10-09 23:30:00 UTC |
| Description | Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Juniper | Screenos | 6.3.0r1 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r10 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r11 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r12 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r13 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r14 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r15 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r16 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r17 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r18 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r19 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r2 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r20 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r21 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r22 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r23 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r24 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r25 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r3 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r4 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r5 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r6 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r7 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r8 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r9 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r1 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r10 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r11 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r12 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r13 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r14 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r15 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r16 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r17 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r18 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r19 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r2 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r20 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r21 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r22 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r23 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r24 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r25 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r3 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r4 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r5 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r6 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r7 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r8 | All | All | All |
| Operating System | Juniper | Screenos | 6.3.0r9 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2018-01 Security Bulletin: ScreenOS: Etherleak vulnerability found on ScreenOS device (CVE-2018-0014) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| Juniper ScreenOS Etherleak Flaw Lets Remote Users Obtain Potentially Sensitive Information from Unpadded Ethernet Packets - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.