> Source: [sk183101](https://support.checkpoint.com/results/sk/sk183101)

# sk183101 - Check Point Response to CVE-2024-24911 - Out of Bounds read in the CPCA process on a Check Point Management Server

| Property | Value |
|----------|-------|
| Solution ID | sk183101 |
| Date Created | 2025-02-02 |
| Last Modified | 2025-02-10 |
| Technical Level | General |
| Products | Security Management Server, Multi-Domain Security Management Server |
| Versions | R82, R81.20, R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS), R81.20, R82 |
| OS | Gaia |

## Symptoms

- In rare scenarios, the `cpca` process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file.

When the `cpca` process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache, and a certificate needs to be verified by the `cpca` process on the Management Server.

This issue received the ID [CVE-2024-24911](https://www.cve.org/CVERecord?id=CVE-2024-24911).

## Cause

An Out-of-Bounds read may occur when processing certain HTTP "POST" requests to the Security Management Server / Domain Management Server to the TCP port 18264.

Repeated requests can cause a denial-of-service (DoS) of the `cpca` process and may lead it to exit unexpectedly with a core dump file.

## Solution

This problem was fixed on the Check Point Management Server.

The fix is included starting from:

* [Check Point R82](https://support.checkpoint.com/results/sk/sk181127)
* [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 79
* [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 158
* [Jumbo Hotfix Accumulator for R81](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81/Default.htm) starting from Take 106

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content