topic Re: CVE-2024-0010 in General Topics

CVE-2024-0010

Koulentis — Fri, 16 Feb 2024 06:01:22 GMT

Hi there everyone.

Could please someone clarify for me what versions are affected regarding CVE-2024-0010 as seen here?

My inquiry goes for version 10.1.11-h5. Is it affected or not? Because I believe there is an error in the way this is written in the article.

If 10.1.11-h5 is affected, then I believe the article should be corrected like this:

Unaffected: =10.1.11-h1, >=10.1.12

TomYoung — Fri, 16 Feb 2024 06:30:01 GMT

PAN-OS 10.1.11-h5 is unaffected because it is greater than, or a higher version than 10.1.11-h1. The syntax of the CVE is correct.

Fixed versions = 10.1.11-h1 and 10.1.12.

Any version higher than > or equal to = those versions is unaffected.

Any version lower < than those versions is affected.

Thanks,

Tom

Koulentis — Fri, 16 Feb 2024 06:32:56 GMT

Thank you very much for clarifying this Tom.