topic Re: Vulnerability Slowloris denial - CVE-2007-6750 in Firewall and Security Management

Vulnerability Slowloris denial - CVE-2007-6750

Shira — Fri, 14 Oct 2022 05:45:17 GMT

Hi,

Any one come across the requirement to mitigate - CVE-2007-6750, if yes, can you please share your inputs.

WR,

Shira

Chris_Atkinson — Fri, 14 Oct 2022 06:30:54 GMT

Can you share some further context to your query?

Recent JHF takes provide a defence mechanism, please refer PRJ-40510, PMTR-85083 (example for R81)

Shira — Fri, 14 Oct 2022 06:30:56 GMT

Hi,

PRA once.

We are running on R80.40 with take 154, (Distributed setup with single GW)

WR,

Shira

Chris_Atkinson — Fri, 14 Oct 2022 06:34:18 GMT

R80.40 JHF T180 includes PRJ-40509,
PMTR-85083 for this i.e.

UPDATE: Added a defense mechanism against partial header attacks known as "Slowloris DoS" (CVE-2007-6750).