CVE-2024-3382: A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually…

PriorityP341high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

EPSS

0.92%

55.9th percentile

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	pan-os	>= 10.2.0 < 10.2.7-h3	10.2.7-h3
palo_alto_networks	pan-os	>= 11.0.0 < 11.0.4	11.0.4
palo_alto_networks	pan-os	>= 11.1.0 < 11.1.2	11.1.2
paloalto	cloud_ngfw	—	—
paloalto	pan-os	—	—
paloalto	prisma_access	—	—
paloaltonetworks	pan-os	—	—
paloaltonetworks	pan-os	>= 10.2.0 < 10.2.7	10.2.7
paloaltonetworks	pan-os	>= 11.0.0 < 11.0.4	11.0.4
paloaltonetworks	pan-os	>= 11.1.0 < 11.1.2	11.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.