QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-2551

Back to search

CVE-2024-2551

Published: Nov 14, 2024

Modified: Nov 19, 2024

PUBLISHED

Description

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

VendorProductVersions

Palo Alto Networks

Cloud NGFW

unaffected
All

Palo Alto Networks

PAN-OS

unaffected
11.2.0
unaffected
11.1.0
affected
11.0.0 - < 11.0.5
affected
10.2.0 - < 10.2.4-h6
affected
10.1.0 - < 10.1.14

Palo Alto Networks

Prisma Access

unaffected
All

Weaknesses (CWE)

CWE-476

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now