PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-476 | CWE-476 NULL Pointer Dereference |
Type: CWE
Description: CWE-476 NULL Pointer Dereference
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 4.0 | 8.7 | HIGH | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber |
Version: 4.0
Base score: 8.7
Base severity: HIGH
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber
Impacts
| CAPEC ID | Description |
|---|
| CAPEC-129 | CAPEC-129 Pointer Manipulation |
Description: CAPEC-129 Pointer Manipulation
Timeline
| Event | Date |
|---|
| Initial publication | 2024-11-13 17:00:00 |
Event: Initial publication
Date: 2024-11-13 17:00:00