CVE-2021-3064
Assigner: palo_alto
Published: 2021-11-10T00:00:00
State: PUBLISHED
affected: product: PAN-OS
vendor: Palo Alto Networks
versions: status: unaffected
version: 9.0.*
status: unaffected
version: 9.1.*
status: unaffected
version: 10.0.*
status: unaffected
version: 10.1.*
changes: at: 8.1.17
status: unaffected
lessThan: 8.1.17
status: affected
version: 8.1
versionType: custom
product: Prisma Access
vendor: Palo Alto Networks
versions: status: unaffected
version: 2.2 all
status: unaffected
version: 2.1 all
configurations: value: This issue is applicable only to PAN-OS firewall configurations with a GlobalProtect portal or gateway enabled. You can verify whether you have a GlobalProtect portal or gateway configured by checking for entries in 'Network > GlobalProtect > Portals' and in 'Network > GlobalProtect > Gateways' from the web interface.
credits: value: Palo Alto Networks thanks the Randori Attack Team (https://twitter.com/RandoriAttack) for discovering and reporting this issue.
datePublic: 2021-11-10T00:00:00
descriptions: value: A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.
exploits: value: Palo Alto Networks is not aware of any malicious exploitation of this issue.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-121
description: CWE-121 Stack-based Buffer Overflow
type: CWE
solutions: value: This issue is fixed in PAN-OS 8.1.17 and all later PAN-OS versions.
source: defect: PAN-96528
discovery: EXTERNAL
timeline: time: 2021-11-10T00:00:00
value: Initial publication
title: PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces
workarounds: value: Enable signatures for Unique Threat IDs 91820 and 91855 on traffic destined for GlobalProtect portal and gateway interfaces to block attacks against CVE-2021-3064.

It is not necessary to enable SSL decryption to detect and block attacks against this issue.
x_generator: engine: Vulnogram 0.0.9