Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Junos Multiple OpenSSL Vulnerabilities

Information

Severity

Severity

Medium

Family

Family

JunOS Local Security Checks

CVSSv2 Base

CVSSv2 Base

6.8

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

8 years ago

Modified

Modified

5 years ago

Summary

The OpenSSL library used in Junos OS is prone to multiple vulnerabilities.

Insight

Insight

The OpenSSL library used in Junos OS is prone to multiple vulnerabilities. CVE-2015-1791: Race condition in the ssl3_get_new_session_ticket function. CVE-2015-1793: Error in the implementation of the alternative certificate chain logic. CVE-2015-1790: DoS vulnerability in the PKCS7_dataDecode function. CVE-2015-1792: DoS vulnerability in the do_free_upto function. CVE-2015-1788: DoS vulnerability in the BN_GF2m_mod_inv function. CVE-2015-1789: DoS vulnerability in the X509_cmp_time function.

Affected Software

Affected Software

Junos OS 12.1, 12.3, 13.2, 13.3, 14.1, 14.2 and 15.1

Detection Method

Detection Method

Checks if a vulnerable OS build is present on the target host.

Solution

Solution

New builds of Junos OS software are available from Juniper. As a workaround disable J-Web and disable SSL service for JUNOScript and only use Netconf.