PAN-OS CVE-2024-9472 Null Pointer Dereference DoS Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-9472 2. Vulnerability Type: Firewall Denial of Service (DoS) Using Specially Crafted Traffic 3. Vulnerability Description: An unreported vulnerability that allows unauthorized attackers to trigger a null pointer dereference in PAN-OS software by sending specially crafted traffic, causing PAN-OS to enter maintenance mode. 4. Affected Versions: - PAN-OS 10.2.7-h12 - PAN-OS 10.2.8-h10 - PAN-OS 10.2.9-h9 - PAN-OS 10.2.9-h11 - PAN-OS 10.2.10-h2 - PAN-OS 10.2.10-h3 - PAN-OS 10.2.11 - PAN-OS 10.2.11-h1 - PAN-OS 10.2.11-h2 - PAN-OS 10.2.11-h3 - PAN-OS 11.1.2-h9 - PAN-OS 11.1.2-h12 - PAN-OS 11.1.3-h2 - PAN-OS 11.1.3-h4 - PAN-OS 11.1.3-h6 - PAN-OS 11.2.2 - PAN-OS 11.2.2-h1 5. Affected Products: - PAN-OS 10.2.7-h12 - PAN-OS 10.2.8-h10 - PAN-OS 10.2.9-h9 - PAN-OS 10.2.9-h11 - PAN-OS 10.2.10-h2 - PAN-OS 10.2.10-h3 - PAN-OS 10.2.11 - PAN-OS 10.2.11-h1 - PAN-OS 10.2.11-h2 - PAN-OS 10.2.11-h3 - PAN-OS 11.1.2-h9 - PAN-OS 11.1.2-h12 - PAN-OS 11.1.3-h2 - PAN-OS 11.1.3-h4 - PAN-OS 11.1.3-h6 - PAN-OS 11.2.2 - PAN-OS 11.2.2-h1 6. Solution: This issue has been fixed in PAN-OS 10.2.7-h16, PAN-OS 10.2.8-h13, PAN-OS 10.2.9-h14, PAN-OS 10.2.10-h7, PAN-OS 10.2.11-h4, PAN-OS 11.1.2-h14, PAN-OS 11.1.3-h10, PAN-OS 11.2.2-h3, PAN-OS 11.2.3, and all subsequent PAN-OS versions. 7. Affected Versions: - Cloud NGFW: All versions - PAN-OS 11.2: < 11.2.3, < 11.2.2-h3 - PAN-OS 11.1: < 11.1.3-h10, < 11.1.2-h14 - PAN-OS 11.0: All versions - PAN-OS 10.2: < 10.2.8-h13, < 10.2.9-14, < 10.2.10-h7, < 10.2.11-h4, < 10.2.7-h16 - PAN-OS 10.1: All versions - Prisma Access: All versions This information helps understand the scope, impact, and remediation status of the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

PAN-OS CVE-2024-9472 Null Pointer Dereference DoS Vulnerability Advisory