CVE-2014-8951: High severity check point security gateway vulnerability

Published Nov 16, 2014

Updated

Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page.

Affected Software

4 affected components

Checkpoint Security Gateway=r75

Checkpoint Security Gateway=r76

Checkpoint Security Gateway=r77

Checkpoint Security Gateway=r77.10

Event History

Nov 16, 2014

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8951?

CVE-2014-8951 has not been assigned a specific severity rating, but it causes a denial of service in affected systems.

How do I fix CVE-2014-8951?

To mitigate CVE-2014-8951, it is recommended to upgrade to the latest version of Check Point Security Gateway that addresses this vulnerability.

Which versions of Check Point Security Gateway are affected by CVE-2014-8951?

CVE-2014-8951 affects the R75, R76, R77, and R77.10 versions of Check Point Security Gateway.

What kind of attack can be executed using CVE-2014-8951?

CVE-2014-8951 allows remote attackers to execute denial of service attacks on the affected Check Point Security Gateway configurations.

Is UserCheck related to CVE-2014-8951?

Yes, CVE-2014-8951 occurs when UserCheck is enabled along with specific security features like Application Control and URL Filtering.