CVE-2020-1992

Name of the Vulnerable Software and Affected Versions PAN-OS versions 9.0.0 through 9.0.6 PAN-OS versions 9.1.0 through 9.1.1

Description A format string vulnerability in the Varrcvr daemon of PAN-OS allows remote attackers to crash the daemon, creating a denial of service condition, or potentially execute code with root privileges. This issue requires WildFire services to be configured and enabled.

Recommendations For PAN-OS versions 9.0.0 through 9.0.6, update to version 9.0.7 or later to resolve the issue. For PAN-OS versions 9.1.0 through 9.1.1, update to version 9.1.2 or later to resolve the issue. As a temporary workaround, consider disabling the WildFire services until a patch is available.