Aller au contenu
en Se connecter
7.5 Élevée

CVE-2021-3063 An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and…

Description

An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that causes the service to stop responding. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.21; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h4; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8-h4; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers are not impacted by this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
PAN-OS 10.1 10.1 → < 10.1.3 10.1.3
PAN-OS 10.0 10.0 → < 10.0.8-h4 10.0.8-h4
PAN-OS 9.1 9.1 → < 9.1.11-h3 9.1.11-h3
PAN-OS 9.0 9.0 → < 9.0.14-h4 9.0.14-h4
PAN-OS 8.1 8.1 → < 8.1.21 8.1.21
Prisma Access Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de PAN-OS

Les 197 CVE de PAN-OS →
CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Faible CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Faible CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Moyenne CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Moyenne
Suivre cette CVE