CVE-2024-9468 — Out-of-bounds Write in Palo Alto Networks Pan-os

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
8.2HIGHNVD
EPSS
0.6%
top 30.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Palo Alto Networks Pan-osPaloaltonetworks Pan-osPaloalto Cloud Ngfw+2 more
Timeline
PublishedOct 9

Description

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages5 packages

▶NVDpaloaltonetworks/pan-os10.2.0 — 10.2.4+10
▶CVEListV5palo_alto_networks/pan-os11.1.0 — 11.1.3+2
▶Palo Altopaloalto/pan-os

🔴Vulnerability Details

2
GHSA
GHSA-84mp-4xjv-gqwj: A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet thr↗2024-10-09
▶
CVEList
PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet↗2024-10-09
▶

📋Vendor Advisories

1
Palo Alto
PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet↗2024-10-09
▶
CVE-2024-9468 — Out-of-bounds Write in Palo | cvebase