CVE-2024-3382

PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets

HIGH

7.5

CVSS Score

Published: April 10, 2024 at 05:05 PM UTC

Updated: June 17, 2026 at 07:44 AM UTC

6 products affected across 1 vendorPAN-OSPa-5440Pa-5420

Using PAN-OS by Palo Alto Networks?

Get instant alerts when new vulnerabilities affect PAN-OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.9%

SSVC

No known exploit

Description

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

PAN-OS · Palo Alto Networks

95%

10.2.0 ≤ v < 10.2.710.2.0 ≤ v < 10.2.7-h311.0.0 ≤ v < 11.0.411.1.0 ≤ v < 11.1.210.2.0 10.2.7 10.2.7 h1 11.0.0 11.1.0

Vendor states this is fixed in 10.1.0 (unaffected)

Affected range stops below 10.2.7, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.2.7-h3, so it looks safe — our inference, not a vendor statement

Affected range stops below 11.0.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 11.1.2, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 9.0.0 (unaffected)

Vendor states this is fixed in 9.1.0 (unaffected)

paloaltonetworks-pa-5410 (environment) · paloaltonetworks-pa-5420 (environment) · paloaltonetworks-pa-5430 (environment) · paloaltonetworks-pa-5440 (environment) · paloaltonetworks-pa-5445 (environment)

Pa-5410 · Palo Alto Networksdevice

80%

All versions

Pa-5420 · Palo Alto Networksdevice

80%

All versions

Pa-5430 · Palo Alto Networksdevice

80%

All versions

Pa-5440 · Palo Alto Networksdevice

80%

All versions