CVE-2018-0014 ScreenOS: Etherleak vulnerability found on ScreenOS device
Attackers can read fragments of system memory or previous packet data from unzeroed Ethernet packets on Juniper ScreenOS devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0014?
CVE-2018-0014 is a medium-severity vulnerability in Juniper Networks ScreenOS, published on 10 Jan 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.
Weakness: CWE-200
Which versions are affected by CVE-2018-0014?
It affects 1 product.
Products include Juniper Screenos.
How do I fix CVE-2018-0014?
No fix has been published for CVE-2018-0014 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-0014 being exploited?
There is no known exploitation of CVE-2018-0014 in the wild and no public exploit code.
Other vulnerabilities in Juniper Networks ScreenOS
- CVE-2015-7755 Juniper ScreenOS Improper Authentication
- CVE-2017-2336 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2335 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2337 ScreenOS: XSS vulnerability in ScreenOS Firewall
- CVE-2017-2338 ScreenOS: XSS vulnerability in ScreenOS Firewall
Sources
Also known as GHSA-xgmx-gwqj-mmc5.