GlobalProtect Portal Version Disclosure

A Palo Alto Networks firewall configured to host the GlobalProtect Portal advertises its running PAN-OS version. Ref PAN-60568/99786...

Kernel Vulnerabilities

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. Ref PAN-52379/87408...

Palo Alto PAN-OS Web Interface DoS Vulnerability (PAN-SA-2016-0024)

Palo Alto Networks firewalls offer a web interface to manage all aspects of the device. A denial of service condition was identified in this process SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Palo Alto Networks PAN-OS 5.0.x < 5.0.19 / 5.1.x < 5.1.12 / 6.0.x < 6.0.14 / 6.1.x < 6.1.12 / 7.0.x < 7.0.8 Privilege Escalation (PAN-SA-2016-0012)

The version of Palo Alto Networks PAN-OS running on the remote host is 5.0.x prior to 5.0.19, 5.1.x prior to 5.1.12, 6.0.x prior to 6.0.14, 6.1.x prior to 6.1.12, or 7.0.x prior to 7.0.8. It is, therefore, affected by a privilege escalation vulnerability due to improper sanitization of the...

Palo Alto Networks PAN-OS 6.0.x < 6.0.14 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.0.x prior to 6.0.14. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to gain elevated privileges. - An unspecified flaw exists in the policy...

Glibc DNS Resolver Vulnerability

A vulnerability in the GNU libc glibc DNS resolver allows remote code execution CVE-2015-7547. However, this issue can be exploited only from a DNS server that is under the control of an attacker. Ref 91886. This glibc issue is only exploitable by an attacker controlling the DNS server configured...

Glibc DNS Resolver Vulnerability

A vulnerability in the GNU libc glibc DNS resolver allows remote code execution CVE-2015-7547. However, this issue can be exploited only from a DNS server that is under the control of an attacker. Ref 91886. This glibc issue is only exploitable by an attacker controlling the DNS server configured...

Palo Alto Networks PAN-OS 7.0.x < 7.0.8 Multiple Vulnerabilities (PAN-SA-2016-0008 / PAN-SA-2016-0009)

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x prior to 7.0.8. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the API hosted on the management interface, specifically in the panUserLogin function within...

Palo Alto Networks PAN-OS Privilege Acquisition Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A privilege acquisition vulnerability exists in Palo Alto Networks PAN-OS. A local attacker can exploit this vulnerability to gain privileges by filtering rootreboot calls incorrect...

Design/Logic Flaw

Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the rootreboot local invocation...

CVE-2016-1712

Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the rootreboot local invocation...

CVE-2016-1712

The CVE-2016-1712 issue affects Palo Alto Networks PAN-OS: local privilege escalation due to improper sanitization of the root_reboot local invocation. A local attacker with shell access can escalate privileges. Affected PAN-OS versions include 5.0.18 and earlier; 5.1.11 and earlier; 6.0.13 and e...

CVE-2016-1712

Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the rootreboot local invocation...

Palo Alto Networks PAN-OS Denial of Service Vulnerability (CNVD-2016-05079)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A denial of service vulnerability exists in Palo Alto Networks PAN-OS versions 7.0.1 through 7.0.7. An attacker could exploit this vulnerability to cause a denial of service...

Palo Alto PAN-OS OpenSSH vulnerabilities (PAN-SA-2016-0011)

OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

Palo Alto PAN-OS Local privilege escalation (PAN-SA-2016-0012)

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Local privilege escalation

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...

Local privilege escalation

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...

CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...