PT-2016-5642 · Palo Alto Networks · Pan-Os

Felix Wilhelm · Published 2016-02-24 · Updated 2020-02-17 · CVE-2016-3656

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions 7.0.5 and prior

Description The issue allows remote attackers to cause a denial of service via a crafted request to the GlobalProtect Portal, resulting in a service crash. This can be exploited remotely by an attacker with network access to the GlobalProtect portal.

Recommendations For versions 5.0.17 and prior, update to version 5.0.18 or later. For versions 6.0.12 and prior, update to version 6.0.13 or later. For versions 6.1.9 and prior, update to version 6.1.10 or later. For versions 7.0.5 and prior, update to version 7.0.5H2 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-3656

Affected Products

Pan-Os

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-3656 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3656 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2016-3656 · Note