Skip to content
OpenAdvisories
High · 7.2 CVE-2020-1990 EUVD-2020-12780GHSA-cm7j-2j4j-9pf4

PAN-OS: Buffer overflow in the management server

Published Apr 8, 2020 · Updated Sep 17, 2024 · Assigned by palo_alto

Description

A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 8.1 versions before 8.1.13; 9.0 versions before 9.0.7. This issue does not affect PAN-OS 7.1.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 8.1 – < 8.1.13, 9.0 – < 9.0.7 7.1.*

References