About Treck TCP/IP(Ripple20 Vulnerabilities) IPS Signature

[Jeff_Gao]

Dear

       If check point have  a plan to publish or update Treck TCP/IP(Ripple20 Vulnerabilities) IPS Signature?

       I update ips signatures up to date,but i can not search follow signatures:

      CVE-2020-11896 CVE-2020-11897 CVE-2020-11898 CVE-2020-11899 CVE-2020-11900 CVE-2020-11901 CVE-2020-11902 CVE-2020-11903 CVE-2020-11904 CVE-2020-11905 CVE-2020-11906 CVE-2020-11907 CVE-2020-11908 CVE-2020-11909 CVE-2020-11910 CVE-2020-11911 CVE-2020-11912 CVE-2020-11913 CVE-2020-11914 .

    If check point have a Temporary solution about ripple 20 vulnerabilities,thanks!

[firewall1-gx]

Hi Jeff,
Fortunately Check Point is not vulnerable to the Ripple20 vulnerabilities as we do not use the Treck IP stack.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Regards,

[Jeff_Gao]

@ firewall1-gx
Thanks for your reply,I know that checkpoint is not vulnerable to the ripple20 vulnerabilities.I want to know that how check point to prevent this vulnerability.

[PhoneBoy · Accepted solution]

No IPS signature needed is the related vulnerabilities are handled by our "Packet Sanity" inspection setting in the firewall.
Source: https://research.checkpoint.com/2020/22nd-june-threat-intelligence-bulletin/