Riskcovery

CVE-2022-0023

PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy

State
Published
Severity
5.9 Medium
Published
Apr 13, 2022
Updated
Sep 16, 2024
Reserved
Dec 28, 2021

Read the record on cve.org

Description

An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle (MITM) to send specifically crafted traffic to the firewall that causes the service to restart unexpectedly. Repeated attempts to send this request result in denial-of-service to all PAN-OS services by restarting the device in maintenance mode. This issue does not impact Panorama appliances and Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.22; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5. This issue does not impact PAN-OS 10.2.

Scores

CVSSScoreVectorSource
3.15.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hpalo_alto

Weaknesses

  • CWE-755 Improper Handling of Exceptional Conditions

Affected Products

ProductVersions
PAN-OSPalo Alto Networks
  • 10.2.*Not affected
  • 8.1 to before 8.1.22Affectedfrom 8.1.22Not affected
  • 9.1 to before 9.1.13Affectedfrom 9.1.13Not affected
  • 10.1 to before 10.1.5Affectedfrom 10.1.5Not affected
  • 10.0 to before 10.0.10Affectedfrom 10.0.10Not affected
  • 9.0 to before 9.0.16Affectedfrom 9.0.16Not affected
Prisma AccessPalo Alto Networks
  • 3.0 Preferred, InnovationNot affected
  • 2.2 PreferredNot affected
  • 2.1 Preferred, InnovationNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.