R81.20 Jumbo Hotfix Take 120 (CVE-2019-6109, CVE-2019-6110, CVE-2019-6111)

[velo]

Good day

I'm just trying to understand the release notes for 81.20 Take 120

For PRJ-63741, PMTR-119534: UPDATE: Check Point response to CVE-2019-6109, CVE-2019-6110, CVE-2019-6111. Refer to sk65269.

In the sk65269 article, for those 3 x CVEs it lists them as "Vulnerable, but not exploitable" What does that actually mean?

I just want to find out if my firewalls are vulnerable and I need to upgrade now. Normally I like to wait a little while after new hotfixes are released.

Thank you

[Ambar · Accepted solution]

This means that the open source we are using contains this CVE but by Check Point flows and work methods this flaw can’t be exploited

[velo]

Perfect, thanks