Windows IPv4 and IPv6 Stack Vulnerabilities (CVE-2021-24074, CVE-2021-24086 and CVE-2021-24094)

[Amit_Singh3]

Hello Team,

We have received notification about listed vulnerabilities. There are no IPS signatures released (Checkpoint Advisories) at moment for these CVE’s.

CVE-2021-24074

CVE-2021-24086

CVE-2021-24094

Any idea, when IPS signatures will be available.

Regards

Amit

[Avi_Bechor]

Hi Amit,
Those vulnerabilities are more relevant for the Firewall, and are actually already blocked by Check Point Firewall, due to the following reasons:
Invalid IP option
Invalid ICMP-error header length
Virt defrag timeout

Thanks,
Avi

[Amit_Singh3]

Thank You Avi for information.

Kind Regards

Amit