Memory Corruption in PAN-OS by Palo Alto Networks
CVE-2019-1580

9.8CRITICAL

Key Information:

Vendor
Palo Alto Networks
Status
Palo Alto Networks Pan-os
Vendor
CVE Published:
23 August 2019

Summary

A vulnerability affecting PAN-OS releases allows a remote, unauthenticated attacker to send a specially crafted message to Secure Shell Daemon (SSHD), potentially leading to memory corruption. This flaw can enable unauthorized access or control over affected systems, underlining the importance of applying available patches and monitoring network activity to defend against potential exploitation.

Affected Version(s)

Palo Alto Networks PAN-OS PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier.

References

https://security.paloaltonetworks.com/CVE-2019-1580
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.