NetSight
high7.5

CVE-2024-2551

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewal…

Impact

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Affected products

VendorProductAffected versions
PaloaltonetworksPan-Os
from 10.1.0 before 10.1.14
from 10.2.0 before 10.2.4
from 11.0.0 before 11.0.5
Version 10.2.4

Weakness classification

References