Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-3038 EUVD-2021-26390GHSA-9x9w-5fmf-qmhj

GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

Published Apr 20, 2021 · Updated Sep 16, 2024 · Assigned by palo_alto

Description

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.8; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.4.

Affected products

VendorProductAffectedFixed
Palo Alto Networks GlobalProtect App 5.1 – < 5.1.8, 5.2 – < 5.2.4 5.1.8

References