vulnerability protection signature for CVE-2020-0601

[wahxwah]

is there any vulnerability protection signature for CVE-2020-0601 (https://www.symantec.com/security-center/vulnerabilities/writeup/111396)?

[kiwi]

Hi @wahxwah ,

There's no record for it in the Threatvault 

I'd recommend reaching out to support.

Cheers !

-Kiwi.

[Ryan_Tobey]

Is there a timeline as to when this will be available?  

[RobGibbs]

My reply from support on it...

Comment: Hi Robert,

I wanted to update you our Content Team is still working on this escalation and I also wanted to share a link that goes over mitigation actions just in case.

https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-concepts/no-decrypti...

You can set your firewall to harden the 'Server Certificate Validation' especially 'Block sessions with untrusted issuers' in 'Decryption Profile' per link above.

[lukeakrigg]

Any update on this?  A signature would be fantastic if possible.