CVE-2024-24911 Out of Bounds read in the CPCA process on Check Point Management Server
An out-of-bounds read in the CPCA process can cause unexpected exits, leading to VPN and SIC connectivity issues on Check Point Management Servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-24911?
CVE-2024-24911 is a medium-severity denial of service vulnerability in checkpoint Multi-Domain Security Management, Quantum Security Management, published on 6 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache.
Weakness: CWE-125
Which versions are affected by CVE-2024-24911?
It affects 1 product.
Products include Checkpoint Gaia Os.
How do I fix CVE-2024-24911?
No fix has been published for CVE-2024-24911 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-24911 being exploited?
There is no known exploitation of CVE-2024-24911 in the wild and no public exploit code.
Other vulnerabilities in checkpoint Multi-Domain Security Management, Quantum Security Management
Sources
Also known as GHSA-hgwc-25jp-vvqf.