Jin Chen

The issue is related to an integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface. This vulnerability allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request can result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode.

The issue is an OS Command Injection vulnerability in the PAN-OS management interface, allowing authenticated administrators to execute arbitrary OS commands with root privileges.

A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary code with root privileges.

An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary commands with root privileges.

An external control of filename vulnerability in the SD WAN component allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases, this results in arbitrary code execution with root permissions.

An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or delete arbitrary system files, impacting the system's integrity or causing a denial of service condition.

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files, affecting the integrity of the system or causing denial of service to all PAN-OS services.

The issue is related to improper handling of objects in memory, which can be exploited by a remote attacker to execute arbitrary code. This can be achieved by using a specially crafted file, allowing the attacker to perform actions in the security context of the current user. The exploitation requires a user to open the specially crafted file with an affected version of the software.