GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.
The GlobalProtect app on iOS is not affected.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Windows
MacOS
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3.0
affected
custom
6.3.3-h9 (6.3.3-999)
Unavailable
6.3.3-h9 (6.3.3-999) → unaffected
6.2.0
affected
custom
6.2.8-h10 (6.2.8-948)
Unavailable
6.2.8-h10 (6.2.8-948) → unaffected
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Android
Chrome OS
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.1
affected
custom
6.1.13
Unavailable
6.1.13 → unaffected
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Linux
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3.0
affected
custom
6.3.3-h2 (6.3.3-42)
Unavailable
6.3.3-h2 (6.3.3-42) → unaffected
6.0.0
affected
custom
6.0.11
Unavailable
6.0.11 → unaffected
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Windows
MacOS
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0
affected
custom
6.0.13
Unavailable
6.0.13 → unaffected
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
Android
Chrome OS
Default status
unaffected
GlobalProtect App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0
affected
custom
6.0.14
Unavailable
6.0.14 → unaffected
GlobalProtect UWP App
Vendor
Palo Alto Networks
Product
GlobalProtect UWP App
Platforms
Windows
Default status
unaffected
GlobalProtect UWP App · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.3
affected
custom
6.3.3-h10
Unavailable
6.3.3-h10 → unaffected
GlobalProtect App
Vendor
Palo Alto Networks
Product
GlobalProtect App
Platforms
iOS
Default status
unaffected
GlobalProtect App · Scoped product and version facts