Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/12/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| PAN-OS | Versions not published yet (product named by CISA KEV) | |
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free