CVE-2024-9468
Out-of-bounds Write (CWE-787)
Summary
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
Impact
This vulnerability can lead to a denial of service (DoS) condition in Palo Alto Networks PAN-OS software. An unauthenticated attacker can exploit this vulnerability by sending crafted packets through the data plane, causing the PAN-OS to crash. Repeated exploitation attempts can force the system into maintenance mode, potentially causing extended downtime and disruption of network services protected by the affected PAN-OS devices.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
Based on the provided information, there is no explicit mention of a patch being available. The security team should closely monitor Palo Alto Networks' security advisories for updates on patch availability.
Mitigation
While waiting for an official patch, consider the following mitigation strategies: 1. Implement strict access controls and network segmentation to limit potential attackers' ability to reach the vulnerable systems. 2. Monitor system logs for signs of exploitation attempts or unusual crashes. 3. If possible, configure intrusion prevention systems (IPS) or firewalls to detect and block crafted packets that may exploit this vulnerability. 4. Have a plan in place to quickly restore systems from maintenance mode if affected. 5. Consider implementing redundancy measures to maintain network availability in case of a successful attack.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:L/U:Amber
Timeline
NVD published the first details for CVE-2024-9468
A CVSS base score of 8.2 has been assigned.
Feedly found the first article mentioning CVE-2024-9468. See article
Feedly estimated the CVSS score as MEDIUM
EPSS Score was set to: 0.04% (Percentile: 9.7%)