Vulnerability · Published Feb 12, 2020 · Assigned by palo_alto
CVE-2020-1976GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.
Medium 4.7
In plain English
A medium-severity security flaw in GlobalProtect from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)0.3%top 79.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | GlobalProtect | 5.0 – through 5.0.5 |
Weakness: CWE-642 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://security.paloaltonetworks.com/CVE-2020-1976 x_refsource_MISC