PT-2013-1318 · Check Point · Check Point Gaia+1

Published 2013-02-21 · Updated 2014-01-23 · CVE-2013-7311

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Gaia versions R75.X through R76 Check Point IPSO OS versions 6.2 R75.X through R76

Description The issue is related to the implementation of the OSPF protocol in the Check Point Gaia operating system, which does not account for duplicate Link State ID values in LSA packets. This can be exploited by sending specially crafted LSA packets, potentially allowing an attacker to cause a denial of service or obtain sensitive information.

Recommendations For Check Point Gaia versions R75.X through R76, consider disabling the OSPF protocol until a patch is available. For Check Point IPSO OS versions 6.2 R75.X through R76, restrict access to the LSA database to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-694

Related Identifiers

BDU:2019-03757

CVE-2013-7311

Affected Products

Check Point Gaia

Check Point Ipso Os

References · 8

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03757 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7311 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-7311 · Security Note
• http://kb.cert.org/vuls/id/BLUU-985QRC · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490&src=securityAlerts · Note
• http://kb.cert.org/vuls/id/229804 · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 · Note