Vulnerabilities > CVE-2024-3382 - Memory Leak vulnerability in Paloaltonetworks Pan-Os

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

paloaltonetworks

CWE-401

NVD

Published: 2024-04-10

Updated: 2025-01-22

Summary

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled.

Vulnerable Configurations

Part	Description	Count
OS	Paloaltonetworks Paloaltonetworks PAN OS 10.2.0 Paloaltonetworks PAN OS 10.2.1 Paloaltonetworks PAN OS 10.2.2 Paloaltonetworks PAN OS 10.2.3 Paloaltonetworks PAN OS 10.2.4 Paloaltonetworks PAN OS 10.2.5 Paloaltonetworks PAN OS 10.2.6 Paloaltonetworks PAN OS 11.0.0 Paloaltonetworks PAN OS 11.0.1 Paloaltonetworks PAN OS 11.0.2 Paloaltonetworks PAN OS 11.0.3 Paloaltonetworks PAN OS 11.1.0 Paloaltonetworks PAN OS 11.1.1 Paloaltonetworks PAN OS 10.2.7	71
Hardware	Paloaltonetworks Paloaltonetworks PA 5410 - Paloaltonetworks PA 5420 - Paloaltonetworks PA 5430 - Paloaltonetworks PA 5440 - Paloaltonetworks PA 5445 -	5

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References