{"id":14455,"date":"2024-12-31T02:45:59","date_gmt":"2024-12-31T02:45:59","guid":{"rendered":"https:\/\/sekuritasit.com\/?p=14455"},"modified":"2024-12-31T02:45:59","modified_gmt":"2024-12-31T02:45:59","slug":"pan-os-firewall-denial-of-service-dos-vulnerability","status":"publish","type":"post","link":"https:\/\/sekuritasit.com\/index.php\/2024\/12\/31\/pan-os-firewall-denial-of-service-dos-vulnerability\/","title":{"rendered":"PAN-OS Firewall Denial of Service (DoS) Vulnerability"},"content":{"rendered":"

What is the Vulnerability?Attackers are exploiting, a Denial-of-Service vulnerability (CVE-2024-3393) in the DNS Security feature of Palo Alto Networks PAN-OS. This vulnerability allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall, causing it to crash and reboot, potentially leading to Denial of Service (DoS).CISA has also added CVE-2024-3393 to its Known Exploited Vulnerability (KEV) Catalog on December 12, 2024.What is the recommended Mitigation?Palo Alto Networks has released a patch for CVE-2024-3393 and noted in their advisory, that they are \u201caware of customers experiencing this denial of service (DoS) when their firewall blocks malicious DNS packets that trigger this issue\u201d. For detailed guidance, visit https:\/\/security.paloaltonetworks.com\/CVE-2024-3393 What FortiGuard Coverage is available?FortiGuard Labs recommends users to apply the fix provided by the vendor and follow instructions as mentioned on the vendor\u2019s advisory. The FortiGuard Incident Response team can be engaged to help with any suspected compromise.Read More<\/a>\u00a0<\/p>","protected":false},"excerpt":{"rendered":"

What is the Vulnerability?Attackers are exploiting, a Denial-of-Service vulnerability (CVE-2024-3393) in the DNS Security feature of Palo Alto Networks PAN-OS. This vulnerability allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall, causing it to crash and reboot, potentially leading to Denial of Service (DoS).CISA […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-14455","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t