PT-2016-5643 · Palo Alto Networks · Pan-Os

Felix Wilhelm · Publicado 2016-02-24 · Atualizado 2020-02-17 · CVE-2016-3657

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions 7.0.4 and prior

Description A buffer overflow issue exists in the GlobalProtect Portal, allowing remote attackers to cause a denial of service (device crash) or possibly execute arbitrary code via an SSL VPN request. This issue can be exploited by an attacker with network access to the vulnerable GlobalProtect portal, potentially leading to a denial-of-service (DoS) attack on the device and remote code execution on the affected device.

Recommendations For versions 5.0.17 and prior, update to version 5.0.18 or later. For versions 6.0.12 and prior, update to version 6.0.13 or later. For versions 6.1.9 and prior, update to version 6.1.10 or later. For versions 7.0.4 and prior, update to version 7.0.5 or later.

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-3657

Produtos afetados

Pan-Os

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-3657 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3657 · Aviso do Fabricante
• https://security.paloaltonetworks.com/CVE-2016-3657 · Nota