Vulnerability CVE-2024-7264

[tavi0906]

There are VA detected on checkpoint smart console as following. Kindly advise how to fix.

as a trail solution i  have installed the latest build for smartconsole and the issue is still same

Medium

205024

CVE-2024-7264

libcurl 7.32.0 < 8.9.1 DoS (CVE-2024-7264)

Upgrade Curl to version 8.9.1 or later

Path              : C:\Program Files (x86)\CheckPoint\SmartConsole\R81.20\81.20.9700.656\libcurl.dll   Installed version : 7.61.1.0   Fixed version     : 8.9.1

[the_rock · Accepted solution]

Check Point firewalls are not vulnerable to CVE-2024-7264 because the vulnerability affects the libcurl library and Check Point products do not use this library.

[tavi0906]

is this not correct ?

[tavi0906]

In Check Point environments, the main reference to libcurl is through the command-line utility curl_cli.  ?

is this not correct ?

[the_rock]

I think so, yes.

[tavi0906]

Okay. Can we say that Check Point is not vulnerable to this CVE, or has Check Point not yet released any official information regarding it?

[the_rock]

I even had TAC case about it before and they told me exact same thing, which is that CP firewalls are not vulnerable to mentioned CVE.

[tavi0906]

Oh, would you be able to share a screenshot, please?

[the_rock]

This was few months ago, will see if I can find an email about it.

[tavi0906]

[the_rock]

Thats just smart console folder.

[Ruan_Kotze]

Hey Andy,

You might have missed it but OP was not reporting a libcurl vulnerability on the gateway side, it's reported as being in SmartConsole.

-Ruan

[the_rock]

I saw that, yes. Anyway, let Chris confirm internally, to be 100% sure.

[Chris_Atkinson]

This was investigated at the time and the vulnerable flow is not in use in our implementation.

Where required requests to upgrade the libcurl version can be made via your SE under the RFE process.

[the_rock]

Thats more less what TAC advised as well.

[Chris_Atkinson]

Whilst I dislike any detection based solely on version I have asked internally about this.

Suggest raising a specific TAC case and looping in your SE aswell.