What is CVE-2017-8390?

CVE-2017-8390 is a security advisory published by Palo Alto Networks Security Advisories with Critical severity. CVE-2017-8390 Vulnerability in the PAN-OS DNS Proxy

Which CVE IDs does CVE-2017-8390 cover?

CVE-2017-8390 covers the following CVE IDs: CVE-2017-8390. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2017-8390?

CVE-2017-8390 affects 1 product, including: PAN-OS.

CVE-2017-8390Critical

CVE-2017-8390 Vulnerability in the PAN-OS DNS Proxy

Vendor

Palo Alto Networks Security Advisories

Published

July 20, 2017

Last Modified

July 20, 2017

🔗 CVE IDs covered (1)

CVE-2017-8390 →

📋 Description

A Remote Code Execution vulnerability exists in the PAN-OS DNS Proxy. This issue affects customers who have DNS Proxy enabled in PAN-OS. This issue affects both the Data and Management planes of the firewall. When DNS Proxy processes a specially crafted fully qualified domain names (FQDN), it is possible to execute code on the firewall. (ref # PAN-77516 / CVE-2017-8390). Successful exploitation of this issue could allow an attacker to execute code on the firewall. This issue affects PAN-OS 6.1.17 and earlier, PAN-OS 7.0.15 and earlier, PAN-OS 7.1.9 and earlier, PAN-OS 8.0.2 and earlier

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 6.1.18 and later, PAN-OS 7.0.16 and later, PAN-OS 7.1.10 and later, PAN-OS 8.0.3 and later Workarounds and mitigations: Palo Alto Networks recommends disabling DNS Proxy for those customers who are affected and are unable to apply the update.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2017-8390