What is CVE-2021-3064?

CVE-2021-3064 is a security advisory published by Palo Alto Networks Security Advisories with Critical severity. CVE-2021-3064 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

Which CVE IDs does CVE-2021-3064 cover?

CVE-2021-3064 covers the following CVE IDs: CVE-2021-3064. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2021-3064?

CVE-2021-3064 affects 2 products, including: PAN-OS; Prisma Access.

CVE-2021-3064Critical

CVE-2021-3064 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces

Vendor

Palo Alto Networks Security Advisories

Published

November 10, 2021

Last Modified

November 15, 2021

🔗 CVE IDs covered (1)

CVE-2021-3064 →

📋 Description

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue.

This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17.

Prisma Access customers are not impacted by this issue.

🎯 Affected products2

PAN-OS
Prisma Access

✅ Remediation

This issue is fixed in PAN-OS 8.1.17 and all later PAN-OS versions. Workarounds and mitigations: Enable signatures for Unique Threat IDs 91820 and 91855 on traffic destined for GlobalProtect portal and gateway interfaces to block attacks against CVE-2021-3064. It is not necessary to enable SSL decryption to detect and block attacks against this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2021-3064