What is CVE-2021-3057?

CVE-2021-3057 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2021-3057 GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway

Which CVE IDs does CVE-2021-3057 cover?

CVE-2021-3057 covers the following CVE IDs: CVE-2021-3057. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2021-3057?

CVE-2021-3057 affects 1 product, including: GlobalProtect App.

CVE-2021-3057High

CVE-2021-3057 GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway

Vendor

Palo Alto Networks Security Advisories

Published

October 13, 2021

Last Modified

November 23, 2021

🔗 CVE IDs covered (1)

CVE-2021-3057 →

📋 Description

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges.

This issue impacts: GlobalProtect app 5.3 versions earlier than GlobalProtect app 5.3.1 on Linux; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.8 on Windows, Universal Windows Platform, Linux, and MacOS; GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.9 on Windows, Universal Windows Platform, Linux, and MacOS; GlobalProtect app 5.0 versions on Windows, Universal Windows Platform, Linux, and MacOS.

🎯 Affected products1

GlobalProtect App

✅ Remediation

This issue is fixed in GlobalProtect app 5.1.9 on Windows, Universal Windows Platform, Linux, and MacOS; GlobalProtect app 5.2.8 on Windows, Universal Windows Platform, and MacOS; GlobalProtect app 5.3.1 on Linux; and all later GlobalProtect app versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2021-3057