Vulnerability · Published Nov 10, 2021 · Assigned by palo_alto

CVE-2021-3064PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

Critical 9.8

In plain English

A critical-severity stack buffer overflow in PAN-OS from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 20.1% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)20.1%top 2.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	PAN-OS	8.1 – before 8.1.17
Palo Alto Networks	Prisma Access	see references

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://security.paloaltonetworks.com/CVE-2021-3064 x_refsource_MISC