漏洞标题
PAN-OS:全球保护门户和网关接口的拒绝服务(DoS)漏洞
漏洞描述信息
PAN-OS:全球保护门户和网关接口存在的拒绝服务(DoS)漏洞
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces
漏洞描述信息
An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that causes the service to stop responding. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.21; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h4; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8-h4; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers are not impacted by this issue.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
对异常条件的处理不恰当
漏洞标题
GlobalProtect 安全漏洞
漏洞描述信息
Palo Alto Networks GlobalProtect是美国Palo Alto Networks公司的一套网络防护软件。该软件可提供防火墙监控及威胁预防等功能。 Palo Alto Networks GlobalProtect portal and gateway存在安全漏洞,攻击者可利用该漏洞向GlobalProtect接口发送特制的流量,从而导致服务停止响应。受影响的系统包括:PAN-OS 8.1.21之前的PAN-OS 8.1版本;PAN-OS 9.0.14-h4之前的PAN-OS 9.0
CVSS信息
N/A
漏洞类别
其他