Description
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
CVSS breakdown
CVSS 4.0
Attack Vector
Network
Attack Complexity
High
Attack Requirements
None
Privileges Required
None
User Interaction
None
Confidentiality (Vulnerable System)
None
Integrity (Vulnerable System)
None
Availability (Vulnerable System)
High
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
None
AU
Y
R
Unchanged
V
Changed
RE
Low
U
Amber
Affected products
- Palo Alto Networks / Cloud NGFWAll – All
- Palo Alto Networks / Prisma AccessAll – All
- paloaltonetworks / pan-os11.1.1 – 11.1.1
- paloaltonetworks / pan-os11.1.0 – 11.1.0
- paloaltonetworks / pan-os11.0.5 – 11.0.5
- paloaltonetworks / pan-os11.0.4 – 11.0.4
- paloaltonetworks / pan-os11.0.4 – 11.0.4
- paloaltonetworks / pan-os11.0.4 – 11.0.4
- paloaltonetworks / pan-os11.0.4 – 11.0.4
- paloaltonetworks / pan-os11.0.4 – 11.0.4
- paloaltonetworks / pan-os11.0.3 – 11.0.3
- paloaltonetworks / pan-os11.0.2 – 11.0.2
- paloaltonetworks / pan-os11.0.1 – 11.0.1
- paloaltonetworks / pan-os11.0.0 – 11.0.0
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.10 – 10.2.10
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.9 – 10.2.9
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.8 – 10.2.8
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.7 – 10.2.7
- paloaltonetworks / pan-os10.2.6 – 10.2.6
- paloaltonetworks / pan-os10.2.5 – 10.2.5
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os10.2.3 – 10.2.3
- paloaltonetworks / pan-os10.2.2 – 10.2.2
- paloaltonetworks / pan-os10.2.1 – 10.2.1
- paloaltonetworks / pan-os10.2.0 – 10.2.0
- paloaltonetworks / pan-os10.2.4 – 10.2.4
- paloaltonetworks / pan-os11.1.2 – 11.1.2