VULNERABILITY INTELLIGENCE

CVE-2018-0014

CVSS score4.3 MEDIUM

EPSS probability0.60%

CISA KEVNot currently listed

Published2018-01-10

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.

Weakness classification

nvd@nist.gov: CWE-200

Primary references

sirt@juniper.net — Third Party Advisory, VDB Entry
sirt@juniper.net — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory