CVE-2024-2551

Published: Nov 14, 2024Modified: Jun 17, 2026

8.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:AmberShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

Affected (7)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 10.1.0 to 10.1.14
Paloaltonetworks Pan Os	From 10.2.0 to 10.2.4
Paloaltonetworks Pan Os	From 11.0.0 to 11.0.5
Paloaltonetworks Pan Os	Version 10.2.4
Paloaltonetworks Pan Os	Version 10.2.4 h2
Paloaltonetworks Pan Os	Version 10.2.4 h3
Paloaltonetworks Pan Os	Version 10.2.4 h4

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://security.paloaltonetworks.com/CVE-2024-2551

Source: psirt@paloaltonetworks.com

Vendor Advisory

Timeline

No history available yet.