What is CVE-2024-3384?

CVE-2024-3384 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2024-3384 PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

Which CVE IDs does CVE-2024-3384 cover?

CVE-2024-3384 covers the following CVE IDs: CVE-2024-3384. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-3384?

CVE-2024-3384 affects 3 products, including: PAN-OS; Cloud NGFW; Prisma Access.

CVE-2024-3384High

CVE-2024-3384 PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

Vendor

Palo Alto Networks Security Advisories

Published

April 10, 2024

Last Modified

April 10, 2024

🔗 CVE IDs covered (1)

CVE-2024-3384 →

📋 Description

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.

🎯 Affected products3

PAN-OS
Cloud NGFW
Prisma Access

✅ Remediation

This issue is fixed in PAN-OS 8.1.24, PAN-OS 9.0.17, PAN-OS 9.1.15-h1, PAN-OS 10.0.12, and all later PAN-OS versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-3384