Vulnerabilities > CVE-2024-2550 - NULL Pointer Dereference vulnerability in Paloaltonetworks Pan-Os

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

paloaltonetworks

CWE-476

NVD

Published: 2024-11-14

Updated: 2025-01-24

Summary

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Vulnerable Configurations

Part	Description	Count
OS	Paloaltonetworks Paloaltonetworks PAN OS 10.2.7 Paloaltonetworks PAN OS 10.2.9 Paloaltonetworks PAN OS 10.2.8 Paloaltonetworks PAN OS 10.2.10 Paloaltonetworks PAN OS 11.0.0 Paloaltonetworks PAN OS 11.0.1 Paloaltonetworks PAN OS 11.0.2 Paloaltonetworks PAN OS 11.0.3 Paloaltonetworks PAN OS 11.0.4 Paloaltonetworks PAN OS 11.0.5 Paloaltonetworks PAN OS 10.2.0 Paloaltonetworks PAN OS 10.2.1 Paloaltonetworks PAN OS 10.2.2 Paloaltonetworks PAN OS 10.2.3 Paloaltonetworks PAN OS 10.2.4 Paloaltonetworks PAN OS 10.2.5 Paloaltonetworks PAN OS 10.2.6 Paloaltonetworks PAN OS 11.1.0 Paloaltonetworks PAN OS 11.1.1 Paloaltonetworks PAN OS 11.1.2 Paloaltonetworks PAN OS 11.1.3 Paloaltonetworks PAN OS 11.1.4	123

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://security.paloaltonetworks.com/CVE-2024-2550