Vulnerability · Published Apr 10, 2024 · Assigned by palo_alto
CVE-2024-3382PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
High 7.5
In plain English
A high-severity resource allocation without limits in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 39.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | PAN-OS | 10.2.0 – before 10.2.7-h311.0.0 – before 11.0.411.1.0 – before 11.1.2 |
| Palo Alto Networks | Cloud NGFW | see references |
| Palo Alto Networks | Prisma Access | see references |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H