← CVE Intelligence

CVE-2024-3393

PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet PUBLISHED

Description (CNA)

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / PAN-OSaffected 11.2.0 before 11.2.3; affected 11.1.0 before 11.1.2-h16; affected 10.2.8 before 10.2.8-h19; affected 10.1.14 before 10.1.14-h8
Palo Alto Networks / PAN-OSunaffected 10.2.0 before 10.2.8; affected 11.2.0 before 11.2.3

CWE

CWE-754

References

ADP enrichment

CISA-ADP

No English description supplied.