Palo Alto PAN-OS Denial Of Service Vulnerability

A vulnerability was identified in Palo Alto PAN-OS. A remote attacker can exploit this vulnerability to trigger denial of service condition on the targeted system.

 

Note:

The firewall configuration must have either a DNS Security License or an Advanced DNS Security License, AND DNS Security logging must be enabled for this issue to be misused by a remote attacker.

 

CVE-2024-3393 is being exploited in the wild. Exploitation of CVE-2024-3393 will cause the firewall to enter maintenance mode.

RISK: High Risk

TYPE: Security software and application – Security Software & Appliance

TYPE: Security Software & Appliance

Impact

  • Denial of Service

System / Technologies affected

  • PAN-OS 10.1 versions >= 10.1.14, < 10.1.15
  • PAN-OS 10.2 versions >= 10.2.8, < 10.2.14
  • PAN-OS 11.1 versions earlier than PAN-OS 11.1.5
  • PAN-OS 11.2 versions earlier than PAN-OS 11.2.3
  • PAN-OS Prisma Access versions >= 10.2.8, < 11.2.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 


Vulnerability Identifier


Source


Related Link

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.