Skip to content
OpenAdvisories
Medium · 4.9 CVE-2020-2031 EUVD-2020-22057GHSA-xqxw-q9gm-q8wr

PAN-OS: Integer underflow in the management interface

Published Jul 8, 2020 · Updated Sep 16, 2024 · Assigned by palo_alto

Description

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 9.1 versions earlier than PAN-OS 9.1.3. This issue does not impact PAN-OS 8.1, PAN-OS 9.0, or Prisma Access services.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 9.1 – < 9.1.3 9.0.*

References