What is PAN-SA-2021-0003?

PAN-SA-2021-0003 is a security advisory published by Palo Alto Networks Security Advisories. PAN-SA-2021-0003 Informational: Impact of the NAME:WRECK DNS vulnerabilities

Why does PAN-SA-2021-0003 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2021-0003?

PAN-SA-2021-0003 affects 2 products, including: PAN-OS; Prisma SD-WAN (CloudGenix).

PAN-SA-2021-0003Disclosed before NVD

PAN-SA-2021-0003 Informational: Impact of the NAME:WRECK DNS vulnerabilities

Vendor

Palo Alto Networks Security Advisories

Published

May 10, 2021

Last Modified

May 12, 2021

📋 Description

The Palo Alto Networks Product Security Assurance team evaluated the NAME:WRECK DNS vulnerabilities impacting multiple TCP/IP software stack implementations. PAN-OS software and Prisma SD-WAN (CloudGenix) devices do not utilize the IPNet, Nucleus NET, FreeBSD, or NetX TCP/IP software stacks related to these vulnerabilities. As a result, there is no known security impact for these vulnerabilities in PAN-OS software or Prisma SD-WAN (CloudGenix) devices.

🎯 Affected products2

PAN-OS
Prisma SD-WAN (CloudGenix)

✅ Remediation

No product updates are required for these issues.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2021-0003