What is CVE-2021-3038?

CVE-2021-3038 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

Which CVE IDs does CVE-2021-3038 cover?

CVE-2021-3038 covers the following CVE IDs: CVE-2021-3038. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2021-3038?

CVE-2021-3038 affects 1 product, including: GlobalProtect App.

CVE-2021-3038Medium

CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

Vendor

Palo Alto Networks Security Advisories

Published

April 14, 2021

Last Modified

April 14, 2021

🔗 CVE IDs covered (1)

CVE-2021-3038 →

📋 Description

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error.

This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.8; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.4.

🎯 Affected products1

GlobalProtect App

✅ Remediation

This issue is fixed in GlobalProtect app 5.1.8, GlobalProtect app 5.2.4, and all later GlobalProtect app versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2021-3038