topic Re: PAN-SA-2016-0025 Kernel Vulnerabilities in General Topics

PAN-SA-2016-0025 Kernel Vulnerabilities

nextgenhappines — Tue, 04 Oct 2016 20:13:54 GMT

Summary

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. (Ref # PAN 52379/87408)

Severity: High

The CVSS Score of CVE-2015-5364 is 7.8, High; while the CVSS Score of CVE-2015-5366 is 5.0, Medium. Those could lead to a Denial of Service attack.

What is the attack vector? Clients traffic pass throught DPs, not MP.

Ernest

Re: PAN-SA-2016-0025 Kernel Vulnerabilities

reaper — Wed, 05 Oct 2016 11:51:58 GMT

Since only the Management Plane kernel is affected, the vector is limited to the management interface

if the management interface is located in an oob network, exposure is limited to only other hosts inside the oob net

Re: PAN-SA-2016-0025 Kernel Vulnerabilities

nextgenhappines — Wed, 05 Oct 2016 14:43:08 GMT

Hi Reaper,

If that is attack surface is small and limited, why the serverity is listed as High? Is it due to the CVSS score of the CVE?

Re: PAN-SA-2016-0025 Kernel Vulnerabilities

reaper — Wed, 05 Oct 2016 14:56:17 GMT

yes , it has a high severity score on mitre and if the Mgmt interface is left exposed could lead to a DoS, meaning you lose control over your firewall

https://securityadvisories.paloaltonetworks.com/Home/Detail/58