Vulnerabilidades do Checkpoint Quantum Security Gateway Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Checkpoint Quantum Security Gateway Firmware: 2 registro(s), com versões afetadas e correções.cpe:2.3:o:checkpoint:quantum_security_gateway_firmware
CVE-2024-24919
Alta · 8.6
KEV Urgente · 89 Exploit público Ransomware CWE-200 28/05/2024
Check Point Quantum Security Gateways Information Disclosure Vulnerability
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
CVE-2021-3449
Média · 5.9
CWE-476 25/03/2021
NULL pointer deref in signature_algorithms processing
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).