Vulnerability · Published Apr 13, 2022 · Assigned by palo_alto

CVE-2022-0023PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy

Medium 5.9

In plain English

A medium-severity security flaw in PAN-OS from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium

Exploit odds (30 days)0.7%top 45.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle (MITM) to send specifically crafted traffic to the firewall that causes the service to restart unexpectedly. Repeated attempts to send this request result in denial-of-service to all PAN-OS services by restarting the device in maintenance mode. This issue does not impact Panorama appliances and Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.22; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5. This issue does not impact PAN-OS 10.2.

Affected products (as reported)

Vendor	Product	Versions
Palo Alto Networks	PAN-OS	8.1 – before 8.1.229.1 – before 9.1.1310.1 – before 10.1.510.0 – before 10.0.109.0 – before 9.0.16
Palo Alto Networks	Prisma Access	see references

Weakness: CWE-755 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://security.paloaltonetworks.com/CVE-2022-0023 x_refsource_MISC