CVE-2024-9468
High
Description
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Paloaltonetworks Pan-os
PublishedOct 9, 2024
First seenOct 9, 2024
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- paloaltonetworks pan-os10.2.4, 10.2.7, 11.0.4, 11.0.6, 11.1.3 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | 10.2.0 ≤ v < 10.2.4, 10.2.5 ≤ v < 10.2.7, 11.0.0 ≤ v < 11.0.4, 11.0.5 ≤ v < 11.0.6, 11.1.0 ≤ v < 11.1.3, 10.2.4, 10.2.7, 10.2.8, 10.2.9, 10.2.10, 11.0.4 | 10.2.4, 10.2.7, 11.0.4, 11.0.6, 11.1.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.