CVE-2014-8952: High severity check point security gateway vulnerability

Published Nov 16, 2014

Updated

Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, (2) IPsec Remote Access, (3) Mobile Access / SSL VPN blade, (4) SSL Network Extender, (5) Identify Awareness blade, (6) HTTPS Inspection, (7) UserCheck, or (8) Data Leak Prevention blade module is enabled, allow remote attackers to cause a denial of service ("stability issue") via an unspecified "traffic condition."

Affected Software

7 affected components

Checkpoint Security Gateway=r75.40-vs

Checkpoint Security Gateway=r75.45

Checkpoint Security Gateway=r75.46

Checkpoint Security Gateway=r75.47

Checkpoint Security Gateway=r76

Checkpoint Security Gateway=r77

Checkpoint Security Gateway=r77.10

Event History

Nov 16, 2014

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8952?

CVE-2014-8952 has a moderate severity rating due to multiple unspecified vulnerabilities affecting various Check Point Security Gateway versions.

How do I fix CVE-2014-8952?

To mitigate CVE-2014-8952, upgrade to the latest patched version of Check Point Security Gateway that addresses these vulnerabilities.

Which versions are affected by CVE-2014-8952?

CVE-2014-8952 affects Check Point Security Gateway versions R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10.

What components are impacted by CVE-2014-8952?

CVE-2014-8952 impacts multiple components including the IPS blade, IPsec Remote Access, and SSL VPN blade among others.

Is there a workaround for CVE-2014-8952?

Currently, there is no known workaround for CVE-2014-8952, and the recommended action is to apply the available updates.