CVE-2019-8462 Denial of service in Check Point Security Gateway
A rare configuration of enhanced logging causes the Check Point Security Gateway to crash, resulting in a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-8462?
CVE-2019-8462 is a high-severity denial of service vulnerability in Check Point Security Gateway, published on 2 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging.
Weakness: CWE-755
Which versions are affected by CVE-2019-8462?
It affects 1 product.
Products include Checkpoint Security Gateway.
How do I fix CVE-2019-8462?
No fix has been published for CVE-2019-8462 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-8462 being exploited?
There is no known exploitation of CVE-2019-8462 in the wild and no public exploit code.
Other vulnerabilities in Check Point Security Gateway
Sources
Also known as GHSA-4cfh-gw3m-q584.