All vulnerabilities
CVE-2022-0028

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Palo Alto Networks PAN-OSNetwork & edge
Open in ThreatlineRecord JSON
CVSS
8.6High
ExploitationExploited in the wildAdded to KEV 22 Aug 2022CISA KEV
Exploit odds (EPSS)2.54%Chance of exploitation activity in the next 30 days, higher than 84% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8.1.23-h1Also 9.0.16-h3, 9.1.14-h4 and 3 moreCVE List
Federal deadline12 Sep 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 10 Aug 2022, 16:00 UTCPublishedCVE List
  2. 22 Aug 2022Added to CISA KEVCISA KEV

Description

A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.

Text from CVE List

Affected versions 11

  • Cloud NGFWunaffected: AllCVE List
  • PAN-OSaffected: 8.1 before 8.1.23-h1CVE List
  • PAN-OSaffected: 9.0 before 9.0.16-h3CVE List
  • PAN-OSaffected: 9.1 before 9.1.14-h4CVE List
  • PAN-OSaffected: 10.0 before 10.0.11-h1CVE List
  • PAN-OSaffected: 10.1 before 10.1.6-h6CVE List
  • PAN-OSaffected: 10.2 before 10.2.2-h2CVE List
  • Prisma Accessunaffected: 2.1 AllCVE List
  • Prisma Accessunaffected: 2.2 AllCVE List
  • Prisma Accessunaffected: 3.0 AllCVE List
  • Prisma Accessunaffected: 3.1 AllCVE List

References 3