PAN-SA-2018-0015High

PAN-SA-2018-0015 OpenSSL Vulnerabilities in PAN-OS

Published
October 12, 2018
Last Modified
October 12, 2018

🔗 CVE IDs covered (3)

CVE-2018-0732 →CVE-2018-0737 →CVE-2018-0739 →

📋 Description

The OpenSSL library has been found to contain vulnerabilities CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739. Palo Alto Networks software makes use of the vulnerable library and is affected. (Ref # PAN-98504/ CVE-2018-0732, CVE-2018-0737, and CVE-2018-0739) The OpenSSL library in use by PAN-OS is patched on a regular basis for security issues. This issue affects PAN-OS 6.1.20 and earlier, PAN-OS 7.1.20 and earlier, PAN-OS 8.0.13 and earlier, and PAN-OS 8.1.3 and earlier. WF-500 running WF-500 software versions PAN-OS 6.1.20 and earlier, PAN-OS 7.1.20 and earlier, PAN-OS 8.0.13 and earlier, and PAN-OS 8.1.3 and earlier.

🎯 Affected products1

  • PAN-OS

✅ Remediation

PAN-OS 7.1.21 and later, PAN-OS 8.0.14 and later, PAN-OS 8.1.4 and later, WF-500 running WF-500 software version 8.0.14 and later, and WF-500 running WF-500 software version 8.1.4 and later. PAN-OS 6.1 will NOT have a fix. For WF-500 software versions 7.1 and earlier, please consult the WildFire Administrator’s Guide for steps to upgrade the software. An online copy of all available documentation can be found here (https://www.paloaltonetworks.com/documentation). Workarounds and mitigations: N/A

🔗 References (1)