7.5 CVE-2024-3393
CISA Kev Catalog
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
https://nvd.nist.gov/vuln/detail/CVE-2024-3393
Categories
CWE-754
References
psirt@paloaltonetworks.com
| https://security.paloaltonetworks.com/CVE-2024-3393 Vendor Advisory |
CPE
| cpe | start | end |
|---|---|---|
| Configuration 1 | ||
| cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* | >= 11.1.0 | <= 11.1.1 |
| cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* | >= 11.2.0 | < 11.2.3 |
| cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h10:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h13:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h15:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h18:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h11:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h14:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h16:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h18:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h9:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h2:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h6:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h9:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h2:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h12:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h14:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h15:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h9:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h10:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h11:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h2:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h6:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:* | ||
| Configuration 2 | ||
| AND | ||
| cpe:2.3:a:paloaltonetworks:prisma_access:-:*:*:*:*:*:*:* | ||
| Running on/with | ||
| cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* | >= 10.2.11 | < 11.2.3 |
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h10:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h13:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h15:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h18:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h19:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h11:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h14:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h16:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h18:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h9:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:* | ||
| cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:* | ||
REMEDIATION
EXPLOITS
Exploit-db.com
| id | description | date | |
|---|---|---|---|
| No known exploits | |||
POC Github
| Url |
|---|
Other Nist (github, ...)
| Url |
|---|
| No known exploits |
CAPEC
Common Attack Pattern Enumerations and Classifications
| id | description | severity |
|---|---|---|
| No entry | ||
Cybersecurity needs ?
Strengthen software security from the outset with our DevSecOps expertise
Integrate security right from the start of the software development cycle for more robust applications and greater customer confidence.
Our team of DevSecOps experts can help you secure your APIs, data pipelines, CI/CD chains, Docker containers and Kubernetes deployments.
