Skip to content
7.5 High

CVE-2024-3382 A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets…

Description

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled.

Affected products and versions

Product Affected versions Fixed in
PAN-OS 11.1 11.1.0 → < 11.1.2 11.1.2
PAN-OS 11.0 11.0.0 → < 11.0.4 11.0.4
PAN-OS 10.2 10.2.0 → < 10.2.7-h3 10.2.7-h3
PAN-OS 10.1 earliest → < 10.1.0 10.1.0
PAN-OS 9.1 earliest → < 9.1.0 9.1.0
PAN-OS 9.0 earliest → < 9.0.0 9.0.0
Cloud NGFW Versions not published
Prisma Access Versions not published
The 197 CVEs of PAN-OS →
Track this CVE