PT-2014-2013 · Check Point · Check Point Security Gateway

Published 2014-03-24 · Updated 2017-09-08 · CVE-2014-8950

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Check Point Security Gateway versions R77 through R77.10

Description The issue is related to resource release errors in the Check Point Security Gateway. It can be exploited by a remote attacker using specially crafted HTTPS requests, potentially leading to a denial of service (crash). This is particularly relevant when the URL Filtering or Identity Awareness blade is in use.

Recommendations For versions R77 through R77.10, consider temporarily restricting access to the HTTPS endpoint to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the URL Filtering or Identity Awareness blade until a fix is provided.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2019-03760

CVE-2014-8950

Affected Products

Check Point Security Gateway

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2014-8950 · Security Note
• https://bdu.fstec.ru/vul/2019-03760 · Security Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98935 · Note
• http://secunia.com/advisories/58487 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98763 · Note
• http://securityfocus.com/bid/67993 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8950 · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98935 · Note