Skip to content
OpenAdvisories
Medium · 4.9 CVE-2020-1995 EUVD-2020-12785GHSA-5cgw-69cq-5ggq

PAN-OS: Management server rasmgr denial of service

Published May 13, 2020 · Updated Sep 17, 2024 · Assigned by palo_alto

Description

A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue affects: PAN-OS 9.1 versions earlier than 9.1.2.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 9.1 – < 9.1.2 9.1.2

References