CVE-2024-3393

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Dec 27, 2024
Source updated: Oct 21, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cloud NGFW

Vendor: Palo Alto Networks
Product: Cloud NGFW
Platforms: Unknown
Default status: unaffected

Cloud NGFW · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

PAN-OS

Vendor: Palo Alto Networks
Product: PAN-OS
Platforms: Unknown
Default status: unaffected

PAN-OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
11.2.0	`affected`	custom	11.2.3	Unavailable	`11.2.3` → `unaffected`
11.1.0	`affected`	custom	11.1.2-h16	Unavailable	`11.1.2-h16` → `unaffected` `11.1.3-h13` → `unaffected` `11.1.4-h7` → `unaffected` `11.1.5` → `unaffected`
10.2.8	`affected`	custom	10.2.8-h19	Unavailable	`10.2.8-h19` → `unaffected` `10.2.9-h19` → `unaffected` `10.2.10-h12` → `unaffected` `10.2.11-h10` → `unaffected` `10.2.12-h4` → `unaffected` `10.2.13-h2` → `unaffected` `10.2.14` → `unaffected`
10.1.14	`affected`	custom	10.1.14-h8	Unavailable	`10.1.14-h8` → `unaffected` `10.1.15` → `unaffected`

PAN-OS

Vendor: Palo Alto Networks
Product: PAN-OS
Platforms: Prisma Access
Default status: unaffected

PAN-OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.2.0	`unaffected`	custom	10.2.8	Unavailable	`10.2.8` → `affected` `10.2.9-h19` → `unaffected` `10.2.10-h12` → `unaffected`
11.2.0	`affected`	custom	11.2.3	Unavailable	`11.2.3` → `unaffected`