CVE-2016-3657 Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of se...
CriticalCVSS 9.8
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service (device crash) or possibly execute arbitrary code via an SSL VPN request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | >= 5.0.0, < 5.0.18 | 5.0.18 |
| paloaltonetworks pan-os | >= 5.1, < 5.1.11 | 5.1.11 |
| paloaltonetworks pan-os | >= 6.0.0, < 6.0.13 | 6.0.13 |
| paloaltonetworks pan-os | >= 6.1.0, < 6.1.10 | 6.1.10 |
| paloaltonetworks pan-os | >= 7.0.0, <= 7.0.5 | No fix listed |