CVE-2020-2031CWE-191

PAN-OS: Integer underflow in the management interface

Medium · published July 8, 2020

CVSS v3.1
4.9
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 9.1 versions earlier than PAN-OS 9.1.3. This issue does not impact PAN-OS 8.1, PAN-OS 9.0, or Prisma Access services.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01135 · 66.2th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2020-07-08T16:35Z
EPSS history
Timeline
  • 08 JUL 16:35Z
    PAN-OS: Integer underflow in the management interface
    cvelistv5