> Source: [sk110153](https://support.checkpoint.com/results/sk/sk110153)

# sk110153 - Check Point response to CVE-2015-7547 and CVE-2015-5229

| Property | Value |
|----------|-------|
| Solution ID | sk110153 |
| Date Created | 2016-02-17 |
| Last Modified | 2020-07-16 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |
| OS | Linux, Gaia |

## Solution

Google Research Team reported on a vulnerability in *glibc* library: [CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow](https://googleonlinesecurity.blogspot.co.il/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html).

Check Point OSs status towards [CVE-2015-7547](https://access.redhat.com/security/cve/cve-2015-7547) and [CVE-2015-5229](https://access.redhat.com/security/cve/cve-2015-5229):

* Gaia 2.6.18 - **not vulnerable** since it is aligned to Red Hat Enterprise Linux 5 which does not distribute the vulnerable version of *glibc*.
* Gaia 3.10 - **not vulnerable** since it uses *glibc* version that already includes the fix for this vulnerability.
* SecurePlatform - **not vulnerable** since it is aligned to Red Hat Enterprise Linux 5 which does not distribute the vulnerable version of *glibc* .  

* IPSO - **not vulnerable** since it uses BSD's *libc* and not *glibc* .  

* BlueCoat - under investigation. Refer to the [Official Advisory](https://bto.bluecoat.com/security-advisory/sa114)   

* Edge - Edge *libc* library is vulnerable, but the problematic function (*getaddrinfo* ) is not used there, since local DNS queries are performed by proprietary code.  

* Embedded Gaia:   

  * Check Point 1100/600 Gateways - **not vulnerable** as they use an older *glibc* library which is not vulnerable.
  * Check Point 1200R and 730/750 devices are vulnerable.  

    **Upgrade Package:**   

    |--------------------------------|-------------------------------------------------------------------------------------------------------------------------------|
    | Product                        | Appliance image                                                                                                               |
    | R77.20.15 for 700 Appliances   | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](http://supportcontent.checkpoint.com/file_download?id=47503) (IMG) |
    | R77.20.11 for 1200R Appliances | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](http://supportcontent.checkpoint.com/file_download?id=47505) (IMG) |

**IPS protection**

On February 18th 2016, Check Point released**DNS Client Resolver glibc Buffer Overflow (CVE-2015-7547)** IPS protection that protects customer environments.  
This protection detects and blocks both TCP and UDP attempts to exploit this vulnerability through Check Point Security Gateway.

Make sure this protection is enabled in your IPS Profile.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content