Product Affected

This issue affects Junos OS 14.1, 14.1X53, 14.2, 15.1, 15.1X49, 15.1X53, 15.1X56, 16.1, 16.2, 17.1. This issue affects CTPOS 7.0, 7.1, 7.2, 7.3. This issue affects CTPView 7.1, 7.2, 7.3. This issue affects NSM 2012.2.
Medium
5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Problem

The ​OpenSSL project has published a security advisory for vulnerabilities resolved in the OpenSSL library on January 26, 2017. The following is a summary of these vulnerabilities and their status with respect to Juniper products:
 

CVE CVSSv3 Base Score Summary
CVE-2017-3731 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash.
CVE-2017-3732 3.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) There is a carry propagating bug in the x86_64 Montgomery squaring procedure. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely.
CVE-2016-7055 3.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation.
 

Affected Products

Junos OS, CTPView, CTPOS, and NSM are potentially affected by one or more of these issues.

Juniper Secure Analytics (JSA, STRM) and ScreenOS are confirmed to not be vulnerable to any of these issues.

This advisory will be updated as additional products are analyzed and fixes become available.

Solution

Junos OS:

The following software releases have been​ updated to OpenSSL 1.0.2k to resolve these specific issues: 14.1R8-S3, 14.1R9, 14.1X53-D43, 14.1X53-D50, 14.2R4-S7, 14.2R7-S6, 14.2R8, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6, 15.1X49-D100, 15.1X53-D230, 15.1X53-D47, 15.1X53-D57, 15.1X53-D63, 15.1X53-D70, 15.1X56-D62, 16.1R3-S3, 16.1R4-S1, 16.1R5, 16.2R1-S3, 16.2R2, 17.1R2, 17.2R1, and all subsequent releases. 

CTPOS:

The following software releases have been​ updated to OpenSSL 1.0.2k to resolve these specific issues: 7.0R7, 7.1R3, 7.2R2, 7.3R2, 7.4R1, and all subsequent releases.

CTPView:

The following software releases have been​ updated to OpenSSL 1.0.2k to resolve these specific issues: 7.1R4, 7.2R2, 7.3R3, 7.4R1, and all subsequent releases.

NSM:

The following software releases have been​ updated to OpenSSL 1.0.2k to resolve these specific issues: NSM 2012.2R14, and all subsequent releases.


These issues are being tracked as PRs 1249517 (Junos OS), 1249823 (CTP), 1249814 (CTPView), and 1250393 (NSM), and are visible on the Customer Support website.

KB16765 [juniper.net] - "In which releases are vulnerabilities  fixed?" describes which release vulnerabilities are fixed as per our End of Engineering and End of Life support policies.
  How to obtain fixed software:

Security vulnerabilities in Junos are fixed in the next available Maintenance Release of each supported Junos version. In some cases, a Maintenance Release is not planned to be available in an appropriate time-frame. For these cases, Service Releases are made available in order to be more timely. Security Advisory and Security Notices will indicate which Maintenance and Service  Releases contain fixes for the issues described. Upon request to JTAC, customers will be provided download instructions for a Service Release. Although Juniper does not provide formal Release Note documentation for a Service Release, a list of "PRs fixed" can be provided on request.
 

Workaround

Standard security best current practices (control plane firewall filters, edge filtering, access lists, etc.) may protect against any remote malicious attacks.

Junos OS:

Since SSL is used for remote network configuration and management applications such as J-Web and SSL Service for JUNOScript (XNM-SSL), viable workarounds for this issue in Junos may include:
  • Disabling J-Web
  • Disable SSL service for JUNOScript and only use Netconf, which makes use of SSH, to make configuration changes
  • Limit access to J-Web and XNM-SSL from only trusted networks
 

General Mitigation (CTP, CTPView)

It is good security practice to limit the exploitable attack surface of critical infrastructure networking equipment. Use access lists or firewall filters to limit access to the HTTPS or SSL/TLS services only from trusted, administrative networks or hosts.
 

Severity Assessment

Information for how Juniper Networks uses CVSS can be found at KB 16446 [juniper.net] "Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories."

Modification History

2017-07-12: Initial publication
2017-11-20: Added NSM fixed releases

Related Information