PT-2016-5643 · Palo Alto Networks · Pan-Os

Felix Wilhelm · Published 2016-02-24 · Updated 2020-02-17 · CVE-2016-3657

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions 7.0.4 and prior

Description A buffer overflow issue exists in the GlobalProtect Portal, allowing remote attackers to cause a denial of service (device crash) or possibly execute arbitrary code via an SSL VPN request. This issue can be exploited by an attacker with network access to the vulnerable GlobalProtect portal, potentially leading to a denial-of-service (DoS) attack on the device and remote code execution on the affected device.

Recommendations For versions 5.0.17 and prior, update to version 5.0.18 or later. For versions 6.0.12 and prior, update to version 6.0.13 or later. For versions 6.1.9 and prior, update to version 6.1.10 or later. For versions 7.0.4 and prior, update to version 7.0.5 or later.

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-3657

Affected Products

Pan-Os

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-3657 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3657 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2016-3657 · Note