Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-3385

PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the following hardware firewall models: - PA-5400 Series firewalls - PA-7000 Series firewalls

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 9.0.0 to < 9.0.17-h4affected
  • 9.1.0 to < 9.1.17affected
  • 10.1.0 to < 10.1.12affected
  • 10.2.0 to < 10.2.8affected
  • 11.0.0 to < 11.0.3affected
  • 11.1.0unaffected

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

References