CVE-2024-24911: Out of Bounds read in the CPCA process on Check Point Management Server
In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24911?
CVE-2024-24911 has a medium severity rating due to potential impacts on VPN and SIC connectivity.
How do I fix CVE-2024-24911?
To mitigate CVE-2024-24911, ensure that your Security Management Server is running the latest version and apply any available patches.
What are the potential consequences of CVE-2024-24911?
CVE-2024-24911 can lead to unexpected termination of the cpca process, resulting in VPN and SIC connectivity issues if the CRL is missing.
Which systems are affected by CVE-2024-24911?
CVE-2024-24911 affects the Check Point Management Server and Security Management Server.
What conditions lead to CVE-2024-24911 occurring?
CVE-2024-24911 occurs in rare scenarios where the cpca process exits unexpectedly, creating a core dump file.