CVE-2024-9468

Published: Oct 9, 2024

Modified: Apr 30, 2025

PUBLISHED

Description

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.

Vendor	Product	Versions
Palo Alto Networks	Cloud NGFW	unaffected `All`
Palo Alto Networks	PAN-OS	unaffected `11.2.0` affected `11.1.0 - < 11.1.3` affected `11.0.0 - < 11.0.4-h5` affected `10.2.0 - < 10.2.4-h24` unaffected `10.1.0`
Palo Alto Networks	Prisma Access	unaffected `All`

Weaknesses (CWE)

CWE-787

References

https://security.paloaltonetworks.com/CVE-2024-9468

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-9468

Description

Affected Products

Weaknesses (CWE)

References