topic Re: Is Check Point affected by Intel Hyper-Threading flaw (CVE-2018-5407) ? in Firewall and Security Management

Is Check Point affected by Intel Hyper-Threading flaw (CVE-2018-5407) ?

Danny — Tue, 06 Nov 2018 08:48:26 GMT

CVE-2018-5407 - Intel processor execution engine sharing on SMT (e.g. Hyper-Threading) flaw

Is Check Point affected? Should we better disable Hyper-Threading (SMT) until a fix is available?

I didn't find any notification yet on Check Point's Alert page.

Re: Is Check Point affected by Intel Hyper-Threading flaw (CVE-2018-5407) ?

Kaspars_Zibarts — Tue, 06 Nov 2018 13:14:47 GMT

Haha, good luck with that on productions chassis running VSX... fully tweaked to coreXL and SXL

Re: Is Check Point affected by Intel Hyper-Threading flaw (CVE-2018-5407) ?

HeikoAnkenbrand — Fri, 09 Nov 2018 19:41:36 GMT

Hi Danny,

As I understood it, you must execute malicious code on the same core to access the other SMT channel. So you need access to the firewall. I don't think the attack should be exploitable without another vulnerability in this case.

But let's wait for Check Point's answer.

Regards

Heiko

Re: Is Check Point affected by Intel Hyper-Threading flaw (CVE-2018-5407) ?

Danny — Mon, 12 Nov 2018 09:19:16 GMT

Check Point Response to CVE-2018-5407 (PortSmash)

Check Point is affected but sees low relevance.