PT-2020-15258 · Palo Alto Networks · Pan-Os

Jin Chen · Published 2020-07-08 · Updated 2020-07-14 · CVE-2020-2031

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 9.1.3

Description The issue is related to an integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface. This vulnerability allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request can result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode.

Recommendations For PAN-OS versions prior to 9.1.3, update to version 9.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the dnsproxyd component to minimize the risk of exploitation.

Fix

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2020-2031

Affected Products

Pan-Os

References · 3

• https://osv.dev/vulnerability/CVE-2020-2031 · Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2020-2031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2031 · Security Note