Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Maik
Advisor
Jump to solution

TCP SACK PANIC - Kernel vulnerabilities | Check Point affected?

Hello,

 

Just wanted to ask for a statement from Check Point regarding CVE-2019-11477, CVE-2019-11478 & CVE-2019-11479. As redhat posted a statement and mentioned several releases are affected my guess is, that Check Point with GAiA is affected too (as based on RH Linux...).

Details can be read below:

https://access.redhat.com/security/vulnerabilities/tcpsack

 

Regards,

Maik

31 Replies
Scott_Chambers
Participant

Question:

We have R80.10 gateways that we plan on patching to fix the 3 TCP SACK Panic vuls mentioned in sk156192.

The SK mentions that there is a patch that can be applied on top of Jumbo hotfix take 203.

There is an ongoing take (take 214) that we would like to use.    We opened a TAC case and TAC stated that the patch would not survive any upgrade up to take 214.

So......

  • Would this be when we request for TAC to create a custom patch for R80.10 take 214?
  • Is there an ETA on when this patch/fix will be rolled up into a R80.10 jumbo hot fix.

 

0 Kudos
PhoneBoy
Admin
Admin
You should be able to ask TAC to port the fix.
They might also be able to advise when the fix will be part of the jumbo.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events