Description (CNA)
A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / PAN-OS | affected 12.1.0 before 12.1.5; affected 11.2.0 before 11.2.10; affected 11.1.0 before 11.1.6-h21; affected 10.2.0 before 10.2.16-h6 |
| Palo Alto Networks / Panorama | unaffected All |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-754
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.