NetSight
high7.5

CVE-2024-2550

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the Glo…

Impact

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Affected products

VendorProductAffected versions
PaloaltonetworksPan-Os
from 10.2.0 before 10.2.7
from 11.0.0 before 11.0.6
from 11.1.0 before 11.1.4
Versions 10.2.7, 10.2.8, 10.2.9

Weakness classification

References