A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
| Vendor | Product | Versions |
|---|---|---|
| palo alto networks | globalprotect | 6.3.0, 6.2.0, 6.1, 6.3.0, 6.0.0, 6.0, 6.0, 6.3 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| palo alto networks | globalprotect | cert_advisory | 90% |
Updated severity to HIGH and marked the vulnerability as actively exploited with an exploit available.
Updated severity to CRITICAL, added new description details, and corrected patch available version.
Initial creation
