Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-0014
HistoryJan 10, 2018 - 10:29 p.m.

CVE-2018-0014

2018-01-1022:29:01
CWE-200
[email protected]
web.nvd.nist.gov

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.

Affected configurations

NVD
Node
juniperscreenosMatch6.3.0r1
OR
juniperscreenosMatch6.3.0r2
OR
juniperscreenosMatch6.3.0r3
OR
juniperscreenosMatch6.3.0r4
OR
juniperscreenosMatch6.3.0r5
OR
juniperscreenosMatch6.3.0r6
OR
juniperscreenosMatch6.3.0r7
OR
juniperscreenosMatch6.3.0r8
OR
juniperscreenosMatch6.3.0r9
OR
juniperscreenosMatch6.3.0r10
OR
juniperscreenosMatch6.3.0r11
OR
juniperscreenosMatch6.3.0r12
OR
juniperscreenosMatch6.3.0r13
OR
juniperscreenosMatch6.3.0r14
OR
juniperscreenosMatch6.3.0r15
OR
juniperscreenosMatch6.3.0r16
OR
juniperscreenosMatch6.3.0r17
OR
juniperscreenosMatch6.3.0r18
OR
juniperscreenosMatch6.3.0r19
OR
juniperscreenosMatch6.3.0r20
OR
juniperscreenosMatch6.3.0r21
OR
juniperscreenosMatch6.3.0r22
OR
juniperscreenosMatch6.3.0r23
OR
juniperscreenosMatch6.3.0r24
OR
juniperscreenosMatch6.3.0r25

Related

cve 5
prion 4
cvelist 5
nessus 21
securityvulns 7
exploitpack 3
ubuntucve 1
seebug 4
nvd 4
cert 2
packetstorm 2
exploitdb 3
openvas 14
paloalto 1
debian 9
osv 6
cisa 1
oracle 1
cve
cve
CVE-2018-0014
2018-01-10 22:29:01
CVE-2003-0001
2003-01-17 05:00:00
CVE-2021-3031
2021-01-13 18:15:14
prion
prion
Design/Logic Flaw
2018-01-10 22:29:00
Information disclosure
2021-01-13 18:15:00
Code injection
2022-07-20 15:15:00
cvelist
cvelist
CVE-2018-0014 ScreenOS: Etherleak vulnerability found on ScreenOS device
2018-01-10 00:00:00
CVE-2003-0001
2003-01-08 05:00:00
CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)
2021-01-13 00:00:00
nessus
nessus
HP-UX PHNE_28636 : HPSBUX0305-261 SSRT3451 Potential Security Vulnerability in HP-UX network drivers (Data Leakage) (rev. 01)
2005-03-18 00:00:00
HP-UX PHNE_28143 : HPSBUX0305-261 SSRT3451 Potential Security Vulnerability in HP-UX network drivers (Data Leakage) (rev. 01)
2005-02-16 00:00:00
Solaris 10 (x86) : 125907-02
2018-03-12 00:00:00
securityvulns
securityvulns
Etherleak: Ethernet frame padding information leakage (A010603-1)
2003-01-08 00:00:00
[Full-Disclosure] IRIX Update Some Network Drivers May Leak Data
2004-04-03 00:00:00
Ethernet frame padding information leakage
2005-10-13 00:00:00
exploitpack
exploitpack
Ethernet Device Drivers Frame Padding - Etherleak Infomation Leakage
2007-03-23 00:00:00
Cisco ASA 8.4.4.6 8.2.5.32 - Ethernet Information Leak
2013-06-10 00:00:00
Linux Kernel 2.0.x2.2.x2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure
2007-03-23 00:00:00
ubuntucve
ubuntucve
CVE-2003-0001
2003-01-17 00:00:00
seebug
seebug
Cisco ASA < 8.4.4.6 & 8.2.5.32 - Ethernet Information Leak
2014-07-01 00:00:00
Linux Kernel 2.0.x/2.2.x/2.4.x,FreeBSD 4.x Network Device Driver Frame Padding Information Disclosure
2014-07-01 00:00:00
Ethernet Device Drivers Frame Padding - Info Leakage Exploit (Etherleak)
2014-07-01 00:00:00
nvd
nvd
CVE-2003-0001
2003-01-17 05:00:00
CVE-2022-22216
2022-07-20 15:15:09
CVE-2013-4690
2013-07-11 14:55:01
cert
cert
Network device drivers reuse old frame buffer data to pad packets
2003-01-06 00:00:00
ptrace contains vulnerability allowing for local root compromise
2004-04-16 00:00:00
packetstorm
packetstorm
Cisco ASA Ethernet Information Leak
2013-06-10 00:00:00
etherleak.txt
2007-03-24 00:00:00
exploitdb
exploitdb
Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure
2007-03-23 00:00:00
Cisco ASA &lt; 8.4.4.6 &lt; 8.2.5.32 - Ethernet Information Leak
2013-06-10 00:00:00
Ethernet Device Drivers Frame Padding - &#039;Etherleak&#039; Infomation Leakage
2007-03-23 00:00:00
openvas
openvas
ICMP 'Etherleak' Information Disclosure
2021-08-23 00:00:00
Juniper Networks Junos OS QFX and EX Series Information Disclosure Vulnerability (JSA10773, Etherleak)
2017-01-12 00:00:00
Debian Security Advisory DSA 312-1 (kernel-patch-2.4.18-powerpc)
2008-01-17 00:00:00
paloalto
paloalto
PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)
2021-01-13 17:00:00
debian
debian
[SECURITY] [DSA-336-2] Factual correction for DSA-336-1
2003-06-30 21:32:58
[SECURITY] [DSA-336-1] New Linux 2.2.20 packages and i386 kernel images fix several vulnerabilities
2003-06-29 16:19:51
[SECURITY] [DSA-332-1] New Linux 2.4.17 source code and MIPS kernel images fix several vulnerabilities
2003-06-29 01:44:01
osv
osv
kernel-patch-2.4.18-powerpc - several vulnerabilities
2003-06-09 00:00:00
linux-kernel-2.4.17 - several vulnerabilities
2003-06-27 00:00:00
linux-kernel-2.4.18 - several vulnerabilities
2003-06-08 00:00:00
cisa
cisa
Juniper Networks Releases Security Updates
2018-01-11 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON
Related for NVD:CVE-2018-0014
cve5prion4cvelist5nessus21securityvulns7exploitpack3ubuntucve1seebug4nvd4cert2packetstorm2exploitdb3openvas14paloalto1debian9osv6cisa1oracle1