The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x prior to 6.1.18, 7.0.x prior to 7.0.17, 7.1.x prior to 7.1.12, or 8.0.x prior to 8.0.3. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists in the OpenSSL     component that is triggered when handling a large number     of consecutive 'SSL3_AL_WARNING' undefined alerts. An     unauthenticated, remote attacker can exploit this, by     continuously sending warning alerts, to exhaust     available CPU resources. Note that this vulnerability     does not affect the 8.0.x version branch.
    (CVE-2016-8610)

  - A remote code execution vulnerability exists in the     Linux kernel in udp.c due to an unsafe second checksum     calculation during execution of a recv system call with     the MSG_PEEK flag. An unauthenticated, remote attacker     can exploit this, via specially crafted UDP traffic, to     cause a denial of service condition or the execution of     arbitrary code. Note that this vulnerability does not     affect the 7.0.x version branch. (CVE-2016-10229)

  - A remote code execution vulnerability exists in the DNS     proxy service that is triggered when resolving fully     qualified domain names (FQDN). An unauthenticated,     remote attacker can exploit this to execute arbitrary     code. Note that this vulnerability was fixed in version     7.1.10 for the 7.1.x version branch. (CVE-2017-8390)

  - A XML external entity (XXE) vulnerability exists due to     an incorrectly configured XML parser accepting XML from     an untrusted source. An unauthenticated, remote attacker     can exploit this by sending specially crafted XML data     to the GlobalProtect external interface. Exploitation of     this vulnerability may allow disclosure of information,     denial of service or server side request forgery.
    (CVE-2017-9458)

  - A stored cross-site scripting (XSS) vulnerability exists     in the Firewall web interface due to improper validation     of user-supplied input before returning it to users. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to execute arbitrary script     code in a user's browser session. (CVE-2017-9459)

  - A cross-site scripting (XSS) vulnerability exists in the     GlobalProtect component due to improper validation of     user-supplied input to unspecified request parameters.
    An unauthenticated, remote attacker can exploit this,     via a specially crafted request, to execute arbitrary     script code in a user's browser session.
    (CVE-2017-9467, CVE-2017-12416)

  - A denial of service vulnerability exists that is     triggered when the system attempts to close the     connection of a rogue client that ignored the URL     filtering block page. An unauthenticated, remote     attacker can exploit this to crash the interface. Note     that this vulnerability does not affect the 6.1.x and     7.0.x version branches.

Plugins Search