Summaryinfo

A vulnerability was found in Palo Alto PAN-OS 5.0.5. It has been classified as problematic. This vulnerability affects unknown code of the component Packet Saturation Handler. The manipulation leads to denial of service. Furthermore, there is an exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Palo Alto PAN-OS 5.0.5 (Firewall Software). It has been rated as critical. This issue affects an unknown code block of the component Packet Saturation Handler. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability.

The weakness was shared 01/22/2014 as DOC-6600 as confirmed advisory (Website). It is possible to read the advisory at live.paloaltonetworks.com. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available.

After immediately, there has been an exploit disclosed. It is declared as proof-of-concept.

Upgrading to version 6.0 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at OSVDB (102401†). The entries VDB-12060, VDB-12061, VDB-12062 and VDB-12063 are related to this item. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Firewall Software

Vendor

• Palo Alto

Name

• PAN-OS

Version

• 5.0.5

License

• commercial

Website

• Vendor: https://www.paloaltonetworks.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion