CVE-2020-2042 — Stack-based Buffer Overflow in Palo Alto Networks Pan-os

CWE-121 — Stack-based Buffer OverflowCWE-120 — Classic Buffer Overflow4 documents4 sources
Severity
7.2HIGHNVD
EPSS
1.8%
top 17.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Palo Alto Networks Pan-osPaloaltonetworks Pan-osPaloalto Pan-os
Timeline
PublishedSep 9
Latest updateMay 24

Description

A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue impacts only PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages3 packages

▶NVDpaloaltonetworks/pan-os10.0.0 — 10.0.1
▶CVEListV5palo_alto_networks/pan-os10.0 — 10.0.1
▶Palo Altopaloalto/pan-os

🔴Vulnerability Details

2
GHSA
GHSA-82q3-wxfg-rg6w: A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially↗2022-05-24
▶
CVEList
PAN-OS: Buffer overflow in the management web interface↗2020-09-09
▶

📋Vendor Advisories

1
Palo Alto
PAN-OS: Buffer overflow in the management web interface↗2020-09-09
▶
CVE-2020-2042 — Stack-based Buffer Overflow in Palo | cvebase