← CVE Intelligence

CVE-2021-3057

GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway PUBLISHED

Description (CNA)

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.9 on Windows; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on Windows; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on the Universal Windows Platform; GlobalProtect app 5.3 versions earlier than GlobalProtect app 5.3.1 on Linux.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / GlobalProtect Appaffected 5.1 before 5.1.9; affected 5.2 before 5.2.8
Palo Alto Networks / GlobalProtect Appaffected 5.3 before 5.3.1
Palo Alto Networks / GlobalProtect Appaffected 5.2 before 5.2.8

CWE

CWE-121

References

ADP enrichment

CVE

No English description supplied.