Palo Alto Networks PAN-OS Denial-of-Service Vulnerabilities in Network Traffic Parsing

Multiple denial-of-service vulnerabilities have been identified in Palo Alto Networks PAN-OS software. These vulnerabilities allow an unauthenticated attacker with network access to disrupt services by sending specially crafted network traffic to a dataplane interface. This issue affects several versions of PAN-OS, including 12.1, 11.2, 11.1, and 10.2, as well as older unsupported versions. However, Panorama and Cloud NGFW are not impacted.

Impact

Exploitation of these vulnerabilities leads to a significant denial-of-service condition, causing high availability disruption on the affected system.

Remediation

Users can upgrade to the latest versions of PAN-OS 12.1, 11.2, 11.1, or 10.2, depending on their current version. For those using Prisma Access, upgrades are being managed by Palo Alto Networks as per the customer upgrade schedule.