CVE-2021-3048

PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage

State: Published
Severity: 5.9 Medium
Published: Aug 11, 2021
Updated: Sep 16, 2024
Reserved: Jan 6, 2021

Description

Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall remains otherwise functional. If the firewall then restarts, it results in a denial-of-service (DoS) condition and the firewall stops processing traffic. This issue impacts: PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier than PAN-OS 10.0.5. PAN-OS 8.1 and PAN-OS 10.1 versions are not impacted.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	palo_alto

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
PAN-OSPalo Alto Networks	10.1.Not affected 8.1.Not affected 9.0 to before 9.0.14Affectedfrom 9.0.14Not affected 9.1 to before 9.1.9Affectedfrom 9.1.9Not affected 10.0 to before 10.0.5Affectedfrom 10.0.5Not affected

References

https://security.paloaltonetworks.com/CVE-2020-3048

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.