A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | quantum security gateway | R82.10 with Jumbo Hotfix Take 43 or below, R82 with Jumbo Hotfix Take 125 or below, R81.20 with Jumbo Hotfix Take 165 or below, R82.10 with Jumbo Hotfix Take 43 or below, R82 with Jumbo Hotfix Take 125 or below, R81.20 with Jumbo Hotfix Take 165 or below |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| check point | spark | cert_advisory | 90% |
| check point | security | cert_advisory | 90% |
| check point | security management | cert_advisory | 90% |
Loading…