Actively Exploited PAN-OS DNS Security Flaw Causes Firewall Reboots and DoS
Active Exploitation · 2 sources · Updated 3mo ago · First seen Dec 31, 2024
Palo Alto Networks released fixes for CVE-2024-3393, a high-severity denial-of-service flaw in the PAN-OS DNS Security component that can be exploited remotely and without authentication using specially crafted DNS packets. Successful exploitation can force affected firewalls to reboot and, if repeated, push them into maintenance mode, leaving devices unavailable; CSIRT.SK reported the vulnerability is being actively exploited in the wild.
Affected products include multiple PAN-OS 10.1, 10.2, 11.1, and 11.2 releases, as well as Prisma Access deployments running vulnerable PAN-OS versions. Exploitation requires DNS Security Logging to be enabled along with either a DNS Security License or Advanced DNS Security License. Palo Alto urged organizations to upgrade immediately to fixed releases and to apply configuration-based mitigations where patching cannot be completed right away.
