PT-2016-5642 · Palo Alto Networks · Pan-Os

Felix Wilhelm · Publicado 2016-02-24 · Atualizado 2020-02-17 · CVE-2016-3656

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions 7.0.5 and prior

Description The issue allows remote attackers to cause a denial of service via a crafted request to the GlobalProtect Portal, resulting in a service crash. This can be exploited remotely by an attacker with network access to the GlobalProtect portal.

Recommendations For versions 5.0.17 and prior, update to version 5.0.18 or later. For versions 6.0.12 and prior, update to version 6.0.13 or later. For versions 6.1.9 and prior, update to version 6.1.10 or later. For versions 7.0.5 and prior, update to version 7.0.5H2 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-3656

Produtos afetados

Pan-Os

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-3656 · Nota de Segurança
• https://security.paloaltonetworks.com/CVE-2016-3656 · Nota
• https://osv.dev/vulnerability/CVE-2016-3656 · Aviso do Fabricante