Description
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
CVSS breakdown
CVSS 4.0
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
None
Confidentiality (Vulnerable System)
None
Integrity (Vulnerable System)
None
Availability (Vulnerable System)
High
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
Low
AU
None
R
Unchanged
V
Changed
RE
M
U
Amber
Affected products
- Palo Alto Networks / Cloud NGFWAll – All
- Palo Alto Networks / pan-os10.2.0 – 10.2.8
- Palo Alto Networks / pan-os11.2.0 – 11.2.3
- paloaltonetworks / pan-os11.2.1 – 11.2.1
- paloaltonetworks / pan-os11.2.1 – 11.2.1
- paloaltonetworks / pan-os11.2.0 – 11.2.0
- paloaltonetworks / pan-os11.2.0 – 11.2.0
- paloaltonetworks / pan-os11.2 – 11.2
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.4 – 11.1.4
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.3 – 11.1.3
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.2 – 11.1.2
- paloaltonetworks / pan-os11.1.1 – 11.1.1
- paloaltonetworks / pan-os11.1.1 – 11.1.1
- paloaltonetworks / pan-os11.1.1 – 11.1.1
- paloaltonetworks / pan-os11.1.0 – 11.1.0
- paloaltonetworks / pan-os11.1.0 – 11.1.0
- paloaltonetworks / pan-os11.1.0 – 11.1.0
- paloaltonetworks / pan-os11.1.0 – 11.1.0
- paloaltonetworks / pan-os11.1.0 – 11.1.0
- paloaltonetworks / pan-os11.1 – 11.1
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2 – 10.2
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1.14 – 10.1.14
- paloaltonetworks / pan-os10.1 – 10.1
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os11.2.2 – 11.2.2
- paloaltonetworks / pan-os11.2.2 – 11.2.2