CVE-2024-3382

🗓️ 10 Apr 2024 17:05:47Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 77 Views

A memory leak in PAN-OS software allows attackers to overwhelm and disrupt firewall traffic processing

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2024-3382	10 Apr 202417:15	–	attackerkb
Circl	CVE-2024-3382	10 Apr 202420:08	–	circl
CNNVD	Palo Alto Networks PAN-OS 安全漏洞	10 Apr 202400:00	–	cnnvd
CNVD	Unspecified Vulnerability in Palo Alto Networks PAN-OS (CNVD-2024-20502)	15 Apr 202400:00	–	cnvd
Cvelist	CVE-2024-3382 PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets	10 Apr 202417:05	–	cvelist
EUVD	EUVD-2024-31971	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Palo Alto PAN OS	12 Apr 202400:00	–	ncsc
NVD	CVE-2024-3382	10 Apr 202417:15	–	nvd
OSV	CVE-2024-3382	10 Apr 202417:15	–	osv
Palo Alto Networks	PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets	10 Apr 202416:00	–	paloalto

NVD

Vulners

Node

paloaltonetworks pan-osRange10.2.0–10.2.7

paloaltonetworks pan-osRange11.0.0–11.0.4

paloaltonetworks pan-osRange11.1.0–11.1.2

paloaltonetworks pan-osMatch10.2.7-

paloaltonetworks pan-osMatch10.2.7h1

AND

paloaltonetworks pa-5410Match-

paloaltonetworks pa-5420Match-

paloaltonetworks pa-5430Match-

paloaltonetworks pa-5440Match-

paloaltonetworks pa-5445Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "9.0.0"
      },
      {
        "status": "unaffected",
        "version": "9.1.0"
      },
      {
        "status": "unaffected",
        "version": "10.1.0"
      },
      {
        "changes": [
          {
            "at": "10.2.7-h3",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.2.7-h3",
        "status": "affected",
        "version": "10.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.0.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.0.4",
        "status": "affected",
        "version": "11.0.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.1.2",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.1.2",
        "status": "affected",
        "version": "11.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cloud NGFW",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Prisma Access",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2024-3382

22 Jan 2025 15:44Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.00449

SSVC