PT-2021-18724 · Microsoft+1 · Windows+1

Christophe Schleypen · CVE-2021-3038 · Published 2021-04-20 · Updated 2022-10-27

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect app versions prior to 5.1.8 Palo Alto Networks GlobalProtect app versions prior to 5.2.4

Description A denial-of-service (DoS) issue in the GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app, resulting in a Windows blue screen of death (BSOD) error.

Recommendations For versions prior to 5.1.8, update to version 5.1.8 or later. For versions prior to 5.2.4, update to version 5.2.4 or later.

Fix

RCE

Weakness Enumeration

CWE-248

CWE-20

Related Identifiers

CVE-2021-3038

Affected Products

Globalprotect

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-3038 · Security Note
• https://security.paloaltonetworks.com/CVE-2021-3038 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3038 · Vendor Advisory
• https://t.me/cvenotify/13653 · Telegram Post