PT-2014-2013 · Check Point · Check Point Security Gateway

Publicado 2014-03-24 · Atualizado 2017-09-08 · CVE-2014-8950

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Check Point Security Gateway versions R77 through R77.10

Description The issue is related to resource release errors in the Check Point Security Gateway. It can be exploited by a remote attacker using specially crafted HTTPS requests, potentially leading to a denial of service (crash). This is particularly relevant when the URL Filtering or Identity Awareness blade is in use.

Recommendations For versions R77 through R77.10, consider temporarily restricting access to the HTTPS endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the URL Filtering or Identity Awareness blade until a fix is provided.

Correção

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

BDU:2019-03760

CVE-2014-8950

Produtos afetados

Check Point Security Gateway

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2014-8950 · Nota de Segurança
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98935 · Nota
• http://secunia.com/advisories/58487 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98763 · Nota
• http://securityfocus.com/bid/67993 · Nota
• https://bdu.fstec.ru/vul/2019-03760 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8950 · Nota
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98935 · Nota