7.5

CVE-2024-9468

PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paloaltonetworks ≫ Pan-os Version >= 10.2.0 < 10.2.4
Paloaltonetworks ≫ Pan-os Version >= 10.2.5 < 10.2.7
Paloaltonetworks ≫ Pan-os Version >= 11.0.0 < 11.0.4
Paloaltonetworks ≫ Pan-os Version >= 11.0.5 < 11.0.6
Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.3
Paloaltonetworks ≫ Pan-os Version 10.2.4 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.4 Update h10
Paloaltonetworks ≫ Pan-os Version 10.2.4 Update h16
Paloaltonetworks ≫ Pan-os Version 10.2.4 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.4 Update h3
Paloaltonetworks ≫ Pan-os Version 10.2.4 Update h4
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h10
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h11
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h12
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h13
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h14
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h15
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h16
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h17
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h18
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h19
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h20
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h21
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h22
Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h23
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h10
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h11
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h12
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h13
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h14
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h15
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h16
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h17
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h18
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h19
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h3
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h4
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h5
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h6
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h7
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h8
Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h9
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h3
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h4
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h5
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h6
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h7
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h8
Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h9
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h1
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2
Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3
Paloaltonetworks ≫ Pan-os Version 11.0.4 Update -
Paloaltonetworks ≫ Pan-os Version 11.0.4 Update h1
Paloaltonetworks ≫ Pan-os Version 11.0.4 Update h2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.338
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
psirt@paloaltonetworks.com 8.2 0 0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:L/U:Amber
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://security.paloaltonetworks.com/CVE-2024-9468
Vendor Advisory